n Horizon Client for Android 4 - VMware Docs Home · This document, VMware Horizon Client for Android Installation and Setup Guide, provides information about installing, configuring,

VMware Horizon Client for AndroidInstallation and Setup Guide

Modified on 21 SEP 2017VMware Horizon Client for Android 4.6

VMware Horizon Client for Android Installation and Setup Guide

2 VMware, Inc.

You can find the most up-to-date technical documentation on the VMware Web site at:

https://docs.vmware.com/

The VMware Web site also provides the latest product updates.

If you have comments about this documentation, submit your feedback to:

[email protected]

Copyright © 2011–2017 VMware, Inc. All rights reserved. Copyright and trademark information.

VMware, Inc.3401 Hillview Ave.Palo Alto, CA 94304www.vmware.com

https://docs.vmware.com/

mailto:[email protected]

http://pubs.vmware.com/copyright-trademark.html

Contents

VMware Horizon Client for Android Installation and Setup Guide 5

1 Setup and Installation 7

System Requirements 7System Requirements for Android Clients 7System Requirements for Thin Clients 8System Requirements for Chromebooks 8System Requirements for Real-Time Audio-Video 9Smart Card Authentication Requirements 9Configure Smart Card Authentication 10Fingerprint Authentication Requirements 11Supported Desktop Operating Systems 12

Preparing Connection Server for Horizon Client 12Installing Horizon Client 13

Install or Upgrade Horizon Client 13Configure AirWatch to Deliver Horizon Client to Android Devices 14Configure AirWatch to Deliver Horizon Client to Android for Work Devices 16

Configuring a List of Servers and a Default Server for Chromebooks 19Configure Horizon Client in Thin Client Mode 20

Using Horizon Client on a Thin Client 20Using Embedded RSA SecurID Software Tokens 21Configure Advanced TLS/SSL Options 22Configure VMware Blast Options 22Configure the Horizon Client Default View 23Horizon Client Data Collected by VMware 24

2 Using URIs to Configure Horizon Client 27

Syntax for Creating vmware-view URIs 27Examples of vmware-view URIs 30

3 Managing Remote Desktop and Application Connections 33

Setting the Certificate Checking Mode in Horizon Client 33Connect to a Remote Desktop or Application 34Use Unauthenticated Access to Connect to Remote Applications 36Share Access to Local Storage with Client Drive Redirection 37Add a Remote Desktop or Application Shortcut to the Android Home Screen 38Manage Server Shortcuts 39Select a Favorite Remote Desktop or Application 39Disconnecting From a Remote Desktop or Application 40Log Off From a Remote Desktop 40Manage Desktop and Application Shortcuts 41

VMware, Inc. 3

Using Android 7.0 Nougat Multi-Window Modes with Horizon Client 41Using Horizon Client with Samsung DeX 41

Enable the DeX Mode Auto Launch Feature 41

4 Using a Microsoft Windows Desktop or Application 43

Feature Support Matrix for Android 44Input Devices, Keyboards, and Keyboard Settings 46Enable the Japanese 106/109 Keyboard Layout 46Using the Real-Time Audio-Video Feature 47Using Native Operating System Gestures with Touch Redirection 47Using the Unity Touch Sidebar with a Remote Desktop 48Using the Unity Touch Sidebar with a Remote Application 50Horizon Client Tools on a Mobile Device 52Gestures 54Multitasking 55Copying and Pasting Text and Images 55Saving Documents in a Remote Application 56Screen Resolutions and Using External Displays 56PCoIP Client-Side Image Cache 57Internationalization and International Keyboards 58

5 Troubleshooting Horizon Client 59

Restart a Remote Desktop 59Reset a Remote Desktop or Remote Applications 60Uninstall Horizon Client 61Collecting and Sending Logging Information to VMware 61

Enable Horizon Client Log Collection 61Manually Retrieve and Send Horizon Client Log Files 62Disable Horizon Client Log Collection 62

Report Horizon Client Crash Data to VMware 62Horizon Client Stops Responding or the Remote Desktop Freezes 63Problem Establishing a Connection When Using a Proxy 63Connecting to a Server in Workspace ONE Mode 64

Index 65


4 VMware, Inc.

VMware Horizon Client for Android Installationand Setup Guide

This document, VMware Horizon Client for Android Installation and Setup Guide, provides information aboutinstalling, configuring, and using VMware Horizon® Client™ software on an Android device.

This information is intended for administrators who must set up a Horizon deployment that includesAndroid client devices. The information is written for experienced system administrators who are familiarwith virtual machine technology and datacenter operations.

VMware, Inc. 5


6 VMware, Inc.

Setup and Installation 1Setting up a Horizon deployment for Android clients involves using certain Connection Serverconfiguration settings, meeting the system requirements for Horizon servers and client devices, andinstalling the Horizon Client app.

This chapter includes the following topics:

n “System Requirements,” on page 7

n “Preparing Connection Server for Horizon Client,” on page 12

n “Installing Horizon Client,” on page 13

n “Configuring a List of Servers and a Default Server for Chromebooks,” on page 19

n “Configure Horizon Client in Thin Client Mode,” on page 20

n “Using Embedded RSA SecurID Software Tokens,” on page 21

n “Configure Advanced TLS/SSL Options,” on page 22

n “Configure VMware Blast Options,” on page 22

n “Configure the Horizon Client Default View,” on page 23

n “Horizon Client Data Collected by VMware,” on page 24

System RequirementsAndroid, thin client, and Chromebook devices that run Horizon Client must meet certain hardware andsoftware requirements.

System Requirements for Android ClientsThe Android device on which you install Horizon Client, and the peripherals it uses, must meet certainsystem requirements.

Android operatingsystems

n Android 4.0 (Ice Cream Sandwich)

n Android 4.1, 4.2, and 4.3 (Jelly Bean)

n Android 4.4 (KitKat)

n Android 5.0 (Lollipop)

n Android 6.0 (Marshmallow)

n Android 7.0 and 7.1 (Nougat)

VMware, Inc. 7

n Android 8.0

CPU architecture n ARM

n x86

Note Non-NEON devices are not supported.

External keyboards (Optional) Bluetooth and docked keyboard devices. For information aboutthe external devices that your specific device supports, see thedocumentation from the device manufacturer.

Smart cards See “Smart Card Authentication Requirements,” on page 9.

Connection Server,security server, andView Agent orHorizon Agent

Latest maintenance release of Horizon 6 version 6.x and later releases.VMware recommends that you use a security server orUnified Access Gateway appliance so that client devices do not require aVPN connection. If your company has an internal wireless network toprovide routable access to remote desktops that devices can use, you do nothave to set up a security server, Unified Access Gateway, or VPN connection

Display protocols n PCoIP

n VMware Blast (requires Horizon Agent 7.0 or later)

You can also install Horizon Client for Android on certain thin clients and Chromebooks. See “SystemRequirements for Thin Clients,” on page 8 and “System Requirements for Chromebooks,” on page 8.

System Requirements for Thin ClientsYou can install Horizon Client for Android on certain thin clients.

The thin client on which you install Horizon Client for Android, and the external input devices it uses, mustmeet certain system requirements.

Thin client models andAndroid operatingsystems

n Remix Mini with Android 5.1 (RemixOS 2.0.205 or later)

n NVIDIA SHIELD Android TV with Android 6.0

n Amazon Fire TV (1st Generation) with Android 5.1

External input devices Horizon Client generally works with any external input device, includingkeyboards and controllers, that works with the thin client. For informationabout the devices that a specific thin client supports, see the documentationfrom the device manufacturer.

Horizon Clientrequirements

Enable the Thin Client mode setting in Horizon Client. See “ConfigureHorizon Client in Thin Client Mode,” on page 20.

System Requirements for ChromebooksYou can install Horizon Client for Android on certain Chromebook models. You can install Horizon Clientfor Android on a Chromebook from Google Play. Not all features are supported on a Chromebook.

Chromebook modelsthat support Androidapps

n ASUS Chromebook Flip

n Acer Chromebook R11 C738T

n Google Chromebook Pixel (2015)


8 VMware, Inc.

Google is continuing to evaluate more devices. For the latest information, goto https://sites.google.com/a/chromium.org/dev/chromium-os/chrome-os-systems-supporting-android-apps?visit_id=0-636124384717258228-2661029306&rd=1.

Feature limitations The following features are not supported when you install Horizon Client forAndroid on a Chromebook.

n AirWatch integration

n Fingerprint authentication

n Smart card authentication

n Rich text copy and paste

n Multiple monitors

System Requirements for Real-Time Audio-VideoReal-Time Audio-Video works with standard audio and video devices and with standard conferencingapplications such as Skype, WebEx, and Google Hangouts. To support Real-Time Audio-Video, yourHorizon environment must meet certain software and hardware requirements.

Remote desktops andapplications

To use Real-Time Audio-Video with published desktops and remoteapplications, you must have Horizon Agent 7.0.2 or later.

Client access device Real-Time Audio Video is supported on all Android devices that runHorizon Client for Android. For more information, see “SystemRequirements for Android Clients,” on page 7.

Smart Card Authentication RequirementsClient systems that use a smart card for user authentication must meet certain requirements.

Client Hardware and Software RequirementsVMware recommends that you use an Android 4.0 or later operating system. The CPU architecture may beARM or x86.

Each client system that uses a smart card for user authentication must have the following hardware andsoftware:

n Horizon Client

n A compatible smart card reader

VMware tested the baiMobile 3000MP Bluetooth Smart Card, baiMobile 301MP USB Smart Card, andbaiMobile 301MP_LT Smart Card readers.

n Smart card middleware

The Android device app must support your baiMobile smart card reader. For example, one such app isbaiMobile PCSC-Lite (Android device tile name baiMobile PC/SC). Horizon Client for Android containssupport for both the baiMobile 3000MP Bluetooth and baiMobile 301MP USB smart card readers.Without such an app, you can pair the Bluetooth card reader with the Android device, but you cannotconnect it. The app sends a connection request to the reader and you tap the OK button on the reader toestablish the Bluetooth connection.

Chapter 1 Setup and Installation

VMware, Inc. 9

https://sites.google.com/a/chromium.org/dev/chromium-os/chrome-os-systems-supporting-android-apps?visit_id=0-636124384717258228-2661029306&rd=1



n Product-specific application drivers

Users that authenticate with smart cards must have a smart card and each smart card must contain a usercertificate.

Remote Desktop and Application Software RequirementsA Horizon administrator must install product-specific application drivers on the remote desktops or RDShost. VMware tested the ActiveClient6.2.0.50, ActivClient_7.0.1, Gemalto.MiniDriver.NET.inf, andCharismathics CSTC PIV 5.2.2 drivers.

Enabling the Username Hint Field in Horizon ClientIn some environments, smart card users can use a single smart card certificate to authenticate to multipleuser accounts. Users enter their user name in the Username hint field during smart card sign-in.

To make the Username hint field appear on the Horizon Client login dialog box, you must enable the smartcard user name hints feature for the Connection Server instance in Horizon Administrator. The smart carduser name hints feature is supported only with Horizon 7 version 7.0.2 and later servers and agents. Forinformation about enabling the smart card user name hints feature, see the View Administration document.

If your environment uses an Unified Access Gateway appliance rather than a security server for secureexternal access, you must configure the Unified Access Gateway appliance to support the smart card username hints feature. The smart card user name hints feature is supported only with Unified Access Gateway2.7.2 and later. For information about enabling the smart card user name hints feature inUnified Access Gateway, see the Deploying and Configuring Unified Access Gateway document.

Note Horizon Client still supports single-account smart card certificates when the smart card user namehints feature is enabled.

Additional Smart Card Authentication RequirementsIn addition to meeting the smart card requirements for Horizon Client systems, other Horizon componentsmust meet certain configuration requirements to support smart cards.

Connection Server andsecurity server hosts

An administrator must add all applicable Certificate Authority (CA)certificates for all trusted user certificates to a server truststore file on theConnection Server host or security server host. These certificates include rootcertificates and must include intermediate certificates if the user's smart cardcertificate was issued by an intermediate certificate authority.

For information about configuring Connection Server to support smart carduse, see the View Administration document.

Active Directory For information about tasks that an administrator might need to perform inActive Directory to implement smart card authentication, see the ViewAdministration document.

Configure Smart Card AuthenticationSmart card configuration tasks include connecting and pairing the card reader with the device and settingthe smart card removal policy.

Prerequisites

Verify that the client device, remote desktops, RDS hosts, Connection Server host, and other Horizoncomponents meet the smart card authentication requirements. See “Smart Card AuthenticationRequirements,” on page 9.


10 VMware, Inc.

Procedure

1 Install the smart card middleware app on the device.

2 Pair the device with the smart card reader, according to the documentation provided by themanufacturer of the reader.

If you are using a Bluetooth smart card reader, a randomly generated number is displayed on bothdevices during this process. When you confirm that the numbers match, you establish secure Bluetoothcommunication.

3 Configure the smart card removal policy.

Option Description

Set the policy on the ConnectionServer instance

When you set the policy on the Connection Server instance, you candisconnect users from the Connection Server instance when they removetheir smart cards, or keep users connected to Connection Server when theyremove their smart cards and let them start new desktop or applicationsessions without reauthenticating.a In Horizon Administrator, select View Configuration > Servers.b On the Connection Servers tab, select the Connection Server instance

and click Edit.c On the Authentication tab, select or deselect the Disconnect user

sessions on smart card removal check box to configure the smart cardremoval policy.

d Click OK to save your changes.e Restart the Connection Server service to make your changes take effect.If you select the Disconnect user sessions on smart card removal checkbox, Horizon Client returns to the Recent tab when users remove theirsmart cards.

Set the policy on the remotedesktop

When you set the policy on the remote desktop, you can use the GroupPolicy Editor (gpedit.msc) to configure one of the following settings: noaction, lock workstation, force log off, or Disconnect if a Remote DesktopServices session.a Open gpedit.msc in the desktop operating system.b Navigate to Windows settings > Security settings > Local policies >

Security options > Interactive logon: smart card removal behavior.c Run the gpupdate /force command after you change the

configuration to force a group policy refresh.

Fingerprint Authentication RequirementsTo use fingerprint authentication in Horizon Client, the Android device on which you install Horizon Clientmust meet certain requirements.

Android device models Any Android device model that has a fingerprint sensor and nativefingerprint reader functionality.

Operating systemrequirements

n Android 6 (Marshmallow) and later

n The Fingerprint Authentication option must be enabled and at least onefingerprint must be enrolled.

Connection Serverrequirements

n Horizon 6 version 6.2 or a later release.

n Enable biometric authentication in Connection Server. For information,see "Configure Biometric Authentication" in the View Administrationdocument.


VMware, Inc. 11

n The Connection Server instance must present a valid root-signedcertificate to Horizon Client.

Horizon Clientrequirements

n Set the certificate checking mode to Never connect to untrusted serversor Warn before connecting to untrusted servers. For information aboutsetting the certificate checking mode, see “Setting the CertificateChecking Mode in Horizon Client,” on page 33.

n Enable fingerprint authentication by tapping Enable Fingerprint on theserver login window. After you successfully log in, your ActiveDirectory credentials are stored securely in your Android device. TheEnable Fingerprint option is shown the first time you log in and doesnot appear after fingerprint authentication is enabled.

You can use fingerprint authentication with smart card authentication and as part of two-factorauthentication with RSA SecurID and RADIUS authentication. If you use fingerprint authentication withsmart card authentication, Horizon Client connects to the server after you enter your PIN and thefingerprint authentication window does not appear.

Supported Desktop Operating SystemsA Horizon administrator creates virtual machines that have a guest operating system and installs agentsoftware in the guest operating system. End users can log in to these virtual machines from a client device.

For a list of the supported Windows guest operating systems, see the View Installation document.

Some Linux guest operating systems are also supported if you have View Agent 6.1.1 or later, orHorizon Agent 7.0 or later. For information about system requirements, configuring Linux virtual machinesfor use in Horizon, and a list of supported features, see Setting Up Horizon 6 for Linux Desktops or Setting UpHorizon 7 for Linux Desktops.

Preparing Connection Server for Horizon ClientA Horizon administrator must perform specific tasks to enable end users to connect to remote desktops andapplications.

Before end users can connect to a Connection Server instance or a security server and access a remotedesktop or application, a Horizon administrator must configure certain pool settings and security settings:

n If you plan to use Unified Access Gateway, configure Connection Server to work withUnified Access Gateway. See the Deploying and Configuring Unified Access Gateway document.Unified Access Gateway appliances fulfill the same role that was previously played by only securityservers.

n If you are using a security server, verify that you are using the latest maintenance releases ofConnection Server 6.x and Security Server 6.x or later releases. For more information, see the ViewInstallation document.

n If you plan to use a secure tunnel connection for client devices and if the secure connection isconfigured with a DNS host name for Connection Server or a security server, verify that the clientdevice can resolve this DNS name.

To enable or disable the secure tunnel, in Horizon Administrator, go to the Edit Horizon ConnectionServer Settings dialog box and use the check box called Use secure tunnel connection to desktop.

n Verify that a desktop or application pool has been created and that the user account that you plan to useis entitled to access the pool. For information, see the Setting Up Virtual Desktops in Horizon 7 or SettingUp Published Desktops and Applications in Horizon 7 document.


12 VMware, Inc.

n To use two-factor authentication with Horizon Client, such as RSA SecurID or RADIUS authentication,you must enable this feature on Connection Server. For more information, see the topics about two-factor authentication in the View Administration document.

n To hide security information in Horizon Client, including server URL information and the Domaindrop-down menu, enable the Hide server information in client user interface and Hide domain list inclient user interface settings in Horizon Administrator. These global settings are available in Horizon 7version 7.1 and later. For information about configuring global settings, see the View Administrationdocument.

To authenticate when the Domain drop-down menu is hidden, users must provide domain informationby entering their user name in the format domain\username or username@domain in the User name textbox.

Important If you enable the Hide server information in client user interface and Hide domain listin client user interface settings and select two-factor authentication (RSA SecureID or RADIUS) for theConnection Server instance, do not enforce Windows user name matching. Enforcing Windows username matching will prevent users from being able to enter domain information in the user name textbox and login will always fail. For more information, see the topics about two-factor authentication inthe View Administration document.

n To enable end users to save their passwords with Horizon Client, so that they do not always need tosupply credentials when connecting to a Connection Server instance, configure Horizon LDAP for thisfeature on the Connection Server host.

Users can save their passwords if Horizon LDAP is configured to allow it, if the Horizon Clientcertificate verification mode is set to Warn before connecting to untrusted servers or Never connect tountrusted servers, and if Horizon Client can fully verify the server certificate that Connection Serverpresents. For instructions, see the View Administration document.

n Verify that the desktop or application pool is set to use the VMware Blast display protocol or the PCoIPdisplay protocol. For information, see the Setting Up Virtual Desktops in Horizon 7 and Setting UpPublished Desktops and Applications in Horizon 7 documents.

n To provide end users unauthenticated access to published applications in Horizon Client, you mustenable this feature in Connection Server. For more information, see the topics about unauthenticatedaccess in the View Administration document.

Installing Horizon ClientYou can install Horizon Client the same way that you install other Android apps. You can also use AirWatchto deliver Horizon Client to Android device users.

Install or Upgrade Horizon ClientHorizon Client for Android is an Android app, and you install it just as you do other Android apps.

Prerequisites

n If you have not already set up the device, do so. See the manufacturer's user's guide for the device.

n Verify that you have the URL for a download page that contains the Horizon Client installer. This URLmight be the VMware Downloads page at http://www.vmware.com/go/viewclients.

n Become familiar with the device's procedure for installing apps.

Devices from different manufacturers use different methods for installing Android apps. See themanufacturer's user's guide for the device. Depending on the device, you might have to perform thefollowing tasks before you can install an app:

n Install a particular driver.


VMware, Inc. 13

http://www.vmware.com/go/viewclients

n Install a file browser.

Procedure

1 Browse to the URL for downloading the Horizon Client app, or search for the Horizon Client app in theGoogle Play Store or Amazon Appstore for Android.

For some devices, you download the file to the device. For others, you download the file to a PC or aUSB device.

2 If necessary, copy the app (.apk file) to your device.

3 Install the app according to the device's customary procedure for installing apps.

For example, on some devices, you must tap the file to install it.

What to do next

To determine whether the installation succeeded, verify that the Horizon app icon appears on the Apps tabon the Android device.

The first time you launch Horizon Client on Android 6.0 Marshmallow, the app prompts you to allowHorizon Client to make and manage phone calls, access photos, media, and files, and record audio on yourdevice.

If you installed Horizon Client on a thin client, see “Configure Horizon Client in Thin Client Mode,” onpage 20.

Configure AirWatch to Deliver Horizon Client to Android DevicesYou can configure AirWatch to deliver Horizon Client to Android device users.

You can optionally specify a list of Connection Server instances or a default Connection Server instance. Ifyou specify a list of servers, the servers appear as shortcuts in Horizon Client. If you specify a default server,Horizon Client automatically connects to that server.

If your environment is set up for Android for Work, do not follow this procedure. Instead, see “ConfigureAirWatch to Deliver Horizon Client to Android for Work Devices,” on page 16.

Prerequisites

n Install and deploy AirWatch. See http://www.air-watch.com.

n Download the Horizon Client app from the VMware Downloads page at http://www.vmware.com/go/viewclients or from the Google Play Store or Amazon Appstore forAndroid.

n Become familiar with the AirWatch console. This procedure assumes you know how to use theAirWatch console. For more information, see the AirWatch documentation or online help.

n Decide which version of Horizon Client to deploy with the AirWatch console. The AirWatch consolecannot deploy both the ARM and the x86 version at the same time.

Procedure

1 Log in to the AirWatch console as an administrator.

2 Select Accounts > Users > List View, click Add, select Add User, and add user accounts for the userswho will run Horizon Client on their Android devices.

3 Select Accounts > Users > User Groups > List View, click Add, select Add User Group, and create auser group for the user accounts that you created.


14 VMware, Inc.

http://www.air-watch.com

http://www.vmware.com/go/viewclients

4 Create an application profile for Horizon Client in AirWatch.

a Select Apps & Books > Applications > Application Settings > Profiles and click Add Profile.

b Select the SDK Profile configuration type.

c Select the Android profile type.

d (Optional) Click Custom Settings to configure a list of servers or a default server.

Use the server property to specify the IP address or host name of the server, the username anddomain properties to specify the name and domain of a user that is entitled to use the server, andthe description property to specify a description of the server. The username, domain, anddescription properties are optional. For example:

{

"settings": {

"server-list":

[

{"server":"123.456.1.1","username":"User1","domain":"TestDomain1","description":"View

server 1"},


server 2"},


server 3"},

{"server":"viewserver4.mydomain.com","username":"User4","domain":"TestDomain4","descripti

on":"View server 4"}

]

}

}

You can use the default property to specify a default server. Valid values are true and false. Forexample:

{

"settings": {

"server-list":

[


server 1","default":true},

]

}

}

5 Upload and add the Horizon Client application to AirWatch.

a Select Apps & Books > Applications > List View and click Add Application on the Internal tab.

b Browse to the Horizon Client app that you downloaded and click Save to upload the application toAirWatch.

c On the Info tab, type an application name and specify the supported mobile device models.

d On the Assignment tab, assign the Horizon Client application to the user group that you created.


VMware, Inc. 15

e On the Deployment tab, set Application uses AirWatch SDK to Yes and select the SDK profile thatyou created from the SDK Profile drop-down menu.

f Publish the Horizon Client application.

6 Install and set up the AirWatch Agent on each device.

You can download the AirWatch Agent from the Google Play Store or Amazon Appstore for Android.

7 Use the AirWatch console to install the Horizon Client application on the devices.

You cannot install the Horizon Client application before the effective date on the Deployment tab.

AirWatch delivers Horizon Client to the devices in the user group that you associated with theHorizon Client application.

When a user launches Horizon Client, Horizon Client communicates with the AirWatch Agent on thedevice. If you configured a list of Connection Server instances, AirWatch pushes the server information tothe AirWatch Agent on the device and shortcuts for those servers appear in Horizon Client.

What to do next

You can use the AirWatch console to edit the Horizon Client application and push those changes to devices.

Configure AirWatch to Deliver Horizon Client to Android for Work DevicesYou can configure AirWatch to deliver Horizon Client to Android for Work device users.

You can optionally specify a list of Connection Server instances or a default Connection Server instance. Ifyou specify a list of servers, the servers appear as shortcuts in Horizon Client. If you specify a default server,Horizon Client automatically connects to that server.

Use this procedure only if your environment is set up for Android for Work. If your environment is not setup for Android for Work, see “Configure AirWatch to Deliver Horizon Client to Android Devices,” onpage 14.

Prerequisites

n Verify that your AirWatch environment is integrated with Android for Work. See the AirWatchdocumentation or online help.

n Install and deploy AirWatch. You must install AirWatch Server v8.0 FP02 or later and AirWatch Agentv4.2 or later. See http://www.air-watch.com. You can download AirWatch Agent from Google Play Storeor Amazon Appstore for Android.

n Become familiar with the AirWatch console. This procedure assumes that you know how to use theAirWatch console. See the AirWatch documentation or online help.

n Verify that you have a corporate Google account. You must have a corporate Google account to enrollAndroid for Work devices. For information about the enrollment process, see the AirWatchdocumentation or online help.

Procedure

1 Log in to the AirWatch Console as an administrator.

2 Create and configure a smart group for your Horizon Client users in AirWatch.

a Select Groups and Settings > Groups > Assignment Groups.

b Click Add Smart Group.


16 VMware, Inc.

http://www.air-watch.com

c Enter the smart group name, select the smart group type, and configure the smart groupproperties.

d Click Save.

3 Add the Horizon Client application to AirWatch.

a Select Apps & Books > Applications > List View.

b On the Public tab, click Add Application.

c Select Android from the Platform drop-down menu, click Search App Store, entercom.vmware.view.client.android in the Name text box, and click Next.

d Click Select next to the Horizon Client application.

e Click Save & Publish.

4 Assign the Horizon Client application to users and configure the deployment details.

a Select Apps & Books > Applications > List View.

b On the Public tab, click the Edit icon next to the Horizon Client application.

c On the Assignment tab, assign the Horizon Client application to the smart group that you created.


VMware, Inc. 17

d (Optional) On the Deployment tab, select a push mode, select the Send Application Configurationcheck box, enter broker_list in the Configuration Key text box, select String from the Value Typedrop-down menu, and enter a list of servers in the Configuration Value text box in JSON format.

Use the server property to specify the IP address or host name of the server, the username anddomain properties to specify the name and domain of a user that is entitled to the server, and thedescription property to specify a description of the server. The username, domain, and descriptionproperties are optional. For example:

{

"settings":{

"server-list":

[


server 1"},


server 2"},


server 3"},

{"server":"viewserver4.mydomain.com","username":"User4","domain":"TestDomain4","descripti

on":"View server 4"}

]

}

}

You can use the default property to specify a default server. Valid values are true and false. Forexample:

{

"settings":{

"server-list":

[


server 1","default":true},

]

}

}

e Click Save & Publish to make the Horizon Client application available to end users.

5 Enroll Android for Work devices.

You use your corporate Google account to enroll the devices.

6 In the AirWatch Console, install the Horizon Client application on each device.

AirWatch delivers Horizon Client to the Android devices in the smart group that you created.

When a user starts Horizon Client, Horizon Client communicates with the AirWatch Agent on the Androiddevice.

If you configured a list of Connection Server instances or a default Connection Server instance, AirWatchpushes the server information to the AirWatch Agent on the Android devices.


18 VMware, Inc.

What to do next

You can use the AirWatch console to edit the Horizon Client application and push those changes to mobiledevices. For example, you can add a default Connection Server instance to the server list for theHorizon Client application.

Configuring a List of Servers and a Default Server for ChromebooksYou can configure a list of Connection Server instances and a default Connection Server instance forHorizon Client for Android on enrolled Chromebooks.

When you configure a list of servers, the servers appear as shortcuts in Horizon Client. If you configure adefault server, Horizon Client automatically connects to that server.

To configure a list of servers or a default server, you must create a JSON configuration file. A Chromeadministrator must use the Google Admin console to upload the JSON configuration file for theHorizon Client for Android app. For detailed information about using the Google Admin console, see the GSuite Administrator Help.

For example, the following JSON configuration file specifies a list of servers. The server property specifiesthe IP address or host name of the server, the username and domain properties specify the name and domainof a user that is entitled to use the server, and the description property specifies a description of the server.The username, domain, and description properties are optional.

{

"broker_list": "

{

\"settings\": {

\"server-list\": [{

\"server\": \"123.456.1.1\",

\"description\": \"View Server 1\",

\"username\": \"User1\",

\"domain\": \"TestDomain1\"

}, {

\"server\": \"123.456.1.2\",




}, {

\"server\": \"123.456.1.3\",




}, {

\"server\": \"viewserver4.mydomain.com\",




}]}

}"

}

The following example shows how to use the default property to specify a default server. Valid values aretrue and false.

{

"broker_list": "

{

\"settings\": {


VMware, Inc. 19

\"server-list\": [{

\"server\": \"123.456.1.1\",


\"default\": true,



}]}

}"

}

You can install Horizon Client for Android only on certain Chromebook models. For information, see “System Requirements for Chromebooks,” on page 8.

Configure Horizon Client in Thin Client ModeYou can configure Horizon Client to work on a thin client by enabling the Thin Client mode setting.

Prerequisites

Install Horizon Client on the thin client. For thin client requirements, see “System Requirements for ThinClients,” on page 8.

Procedure

1 Start Horizon Client on the thin client.

2 Tap the Settings (gear) icon in the upper-right corner of the Horizon Client window.

3 Tap Thin Client mode and select the Thin Client mode check box.

What to do next

See “Using Horizon Client on a Thin Client,” on page 20.

Using Horizon Client on a Thin ClientSome features are different or unavailable when you use Horizon Client in thin client mode.

n The Horizon Client window resolution is set to Auto-fit by default. The auto-fit resolution is the sameas the thin client's HDMI output. For example, if the thin client supports HDMI 4K output, the auto-fitresolution is 4K. If the thin client supports HDMI 1080p output, the auto-fit resolution is 1920x1080. Youcan downscale the resolution by modifying the Horizon Client Resolution setting.

n The Horizon Client Presentation Mode and Stay Awake display settings are not available.

n You cannot modify the Horizon Client Keyboard settings.

n The Horizon Client Tools radial menu is not available in remote desktops and applications.

n In general, the gestures you use in Horizon Client depend on the thin client model and the type ofexternal input device that you use with the thin client. For example, you might have a keyboard, mouse,remote control, or game controller. See the documentation for the external input device for moreinformation.

n The Unity Touch sidebar contains Keyboard, Settings, and Disconnect icons. For more information, see “Using the Unity Touch Sidebar with a Remote Desktop,” on page 48 and “Using the Unity TouchSidebar with a Remote Application,” on page 50.

n The Unity Touch sidebar is supported on Remix Mini and NVIDIA SHIELD Android TV devices. TheUnity Touch sidebar is not supported on Amazon Fire TV.


20 VMware, Inc.

n If you are connected to a remote desktop or application from an Amazon Fire TV device, you must usea pop-up menu to display Horizon Client Settings and to disconnect from the remote desktop orapplication. On a remote control or external keyboard, press the Menu button to display the pop-upmenu.

Using Embedded RSA SecurID Software TokensIf you create and distribute RSA SecurID software tokens to end users, they need enter only their PIN, ratherthan their PIN and a token code, to authenticate.

Setup RequirementsYou can use Compressed Token Format (CTF) or dynamic seed provisioning, which is also called CT-KIP(Cryptographic Token Key Initialization Protocol), to set up an easy-to-use RSA authentication system. Withthis system, you generate a URL to send to end users. To install the token, end users paste this URL directlyinto Horizon Client on their client devices. The dialog box for pasting this URL appears when end usersconnect to a Connection Server instance with Horizon Client.

Horizon Client also supports file-based provisioning. When a file-based software token is issued to a user,the authentication server generates an XML-format token file called an SDTID file. Horizon Client canimport the SDTID file directly. Users can also launch Horizon Client by tapping the SDTID file in a filebrowser.

After the software token is installed, end users enter a PIN to authenticate. With external RSA tokens, endusers must enter a PIN and the token code generated by a hardware or software authentication token.

The following URL prefixes are supported for end users that copy and paste the URL into Horizon Clientwhen Horizon Client is connected to an RSA-enabled Connection Server instance:

n viewclient-securid://

n http://127.0.0.1/securid/

End users can install the token by tapping the URL. Both the viewclient-securid:// andhttp://127.0.0.1/securid/ prefixes are supported. Not all browsers support hyperlinks that begin withhttp://127.0.0.1. Some file browsers, such as the File Manager app on the ASUS Transformer Pad, cannotlink the SDTID file with Horizon Client.

For information about using dynamic seed provisioning or file-based (CTF) provisioning, see the Web pageRSA SecurID Software Token for iPhone Devices at http://www.rsa.com/node.aspx?id=3652 or RSA SecurIDSoftware Token for Android at http://www.rsa.com/node.aspx?id=3832.

Instructions to End UsersWhen you create a CTFString URL or CT-KIP URL to send to end users, you can generate a URL with orwithout a password or activation code. You send this URL to end users in an email that must include thefollowing information:

n Instructions for navigating to the Install Software Token dialog box.

Tell end users to tap External Token in the Horizon Client dialog box that prompts them for RSASecurID credentials when they connect to a Connection Server instance.

n CTFString URL or CT-KIP URL in plain text.

If the URL has formatting on it, end users will get an error message when they try to use it inHorizon Client.

n Activation code, if the CT-KIP URL that you create does not already include the activation code.

End users must enter this activation code in a text field of the dialog box.


VMware, Inc. 21

http://www.rsa.com/node.aspx?id=3652

http://www.rsa.com/node.aspx?id=3832

n If the CT-KIP URL includes an activation code, tell end users that they need not enter anything in thePassword or Activation Code text box in the Install Software Token dialog box.

Configure Advanced TLS/SSL OptionsYou can select the security protocols and cryptographic algorithms that are used to encrypt communicationsbetween Horizon Client and Horizon servers and between Horizon Client and the agent in the remotedesktop.

By default, TLSv1.0, TLSv1.1, and TLSv1.2 are enabled. SSL v2.0 and 3.0 are not supported. The defaultcipher control string is "!aNULL:kECDH+AESGCM:ECDH+AESGCM:RSA+AESGCM:kECDH+AES:ECDH+AES:RSA+AES".

If you configure a security protocol for Horizon Client that is not enabled on the Horizon server to which theclient connects, a TLS/SSL error occurs and the connection fails.

For information about configuring the security protocols that are accepted by Connection Server instances,see the View Security document.

Procedure

1 Open Settings and tap Security options.

If you are connected to a remote desktop or application in full-screen mode, tap the Horizon ClientTools radial menu icon and tap the gear icon to access Settings. If you are not using full-screen mode,Settings is in the menu in the upper right corner of the Horizon Client toolbar. If you are not connectedto a remote desktop or application, tap the gear icon in the upper right corner of the Horizon Clientwindow.

2 Tap Advanced SSL Options.

3 Make sure that Use Default Settings is unchecked.

4 To enable or disable a security protocol, tap the check box next to the security protocol name.

5 To change the cipher control string, replace the default string.

6 (Optional) If you need to revert to the default settings, tap to select the Use Default Settings option.

7 Tap OK to save your changes.

Your changes take effect the next time you connect to the server.

Configure VMware Blast OptionsYou can configure H.264 decoding and network condition options for remote desktop and applicationsessions that use the VMware Blast display protocol.

You cannot configure VMware Blast settings after you connect to a server.

JPG/PNG encoding is always used in multi-monitor mode, even when H.264 decoding is enabled.

Prerequisites

To use this feature, Horizon Agent 7.0 or later must be installed.

Procedure

1 Before you log in to a server, tap the Settings (gear) icon in the upper-right corner of the Horizon Clientwindow and tap VMware Blast.

You cannot configure VMware Blast settings after you log in to a server.


22 VMware, Inc.

2 Configure the decoding and network condition options.

Option Action

H.264 Configure this option to allow H.264 decoding in Horizon Client.When this option is selected (the default setting), Horizon Client uses H.264 decoding if the agent supports H.264 software or hardware encoding.If the agent does not support H.264 software or hardware encoding,Horizon Client uses JPG/PNG decoding.Deselect this option to use JPG/PNG decoding.

Network Condition Select one of the following network condition options:n Excellent - Horizon Client uses only TCP networking. This option is

ideal for a LAN environment.n Typical (default) - Horizon Client works in mixed mode. In mixed

mode, Horizon Client uses TCP networking when connecting to theserver and uses Blast Extreme Adaptive Transport (BEAT) if the agentand Blast Security Gateway (if enabled) support BEAT connectivity.This option is the default setting.

n Poor - Horizon Client uses only BEAT networking if the BEAT TunnelServer is enabled on the server, otherwise it switches to mixed mode.

Note In Horizon 7 version 7.1 and earlier, Connection Server andSecurity Server instances do not support the BEAT Tunnel Server.Unified Access Gateway 2.9 and later supports the BEAT Tunnel Server.Blast Security Gateway for Connection Server and Security Serverinstances do not support BEAT networking.

Changes for H.264 take effect the next time a user connects to a remote desktop or application and selectsthe VMware Blast display protocol. Your changes do not affect existing VMware Blast sessions.

Configure the Horizon Client Default ViewYou can configure whether recently used desktops and applications or server shortcuts appear when youlaunch Horizon Client.

Procedure

1 Open Settings and tap Display.

If you are connected to a remote desktop or application in full-screen mode, tap the Horizon ClientTools radial menu icon and tap the gear icon to access Settings. If you are not using full-screen mode,Settings is in the menu in the upper right corner of the Horizon Client toolbar. If you are not connectedto a remote desktop or application, tap the gear icon in the upper right corner of the Horizon Clientwindow.

2 Tap Default launch view.

3 Tap an option to select the default view.

Option Description

Recent The Recent tab appears when you launch Horizon Client. The Recent tabcontains shortcuts to recently used desktops and applications. This is thedefault setting.

Servers The Servers tab appears when you launch Horizon Client. The Servers tabcontains shortcuts to the servers that you added to Horizon Client.

The default view you selected takes effect immediately.


VMware, Inc. 23

Horizon Client Data Collected by VMwareIf your company participates in the customer experience improvement program, VMware collects data fromcertain Horizon Client fields. Fields that contain sensitive information are anonymous.

VMware collects data on client systems to prioritize hardware and software compatibility. If your company'sadministrator has opted to participate in the customer experience improvement program, VMware collectsanonymous data about your deployment to respond better to customer requirements. VMware does notcollect data that identifies your organization. Horizon Client information is sent first to the ConnectionServer instance and then to VMware, with data from Connection Server, desktop pools, and remotedesktops.

Although the information is encrypted while in transit to the Connection Server instance, the information onthe client system is logged unencrypted in a user-specific directory. The logs do not contain any personallyidentifiable information.

The administrator who installs Connection Server can select whether to participate in the VMware customerexperience improvement program while running the Connection Server installation wizard, or anadministrator can set an option in Horizon Administrator after the installation.

Table 1‑1. Data Collected from Horizon Clients for the Customer Experience Improvement Program

Description

Is This FieldMadeAnonymous? Example Value

Company that produced theHorizon Client application

No VMware

Product name No VMware Horizon Client

Client product version No (The format is x.x.x-yyyyyy, where x.x.x is the client versionnumber and yyyyyy is the build number.)

Client binary architecture No Examples include the following:n i386n x86_64n arm

Client build name No Examples include the following:n VMware-Horizon-Client-Win32-Windowsn VMware-Horizon-Client-Linuxn VMware-Horizon-Client-iOSn VMware-Horizon-Client-Macn VMware-Horizon-Client-Androidn VMware-Horizon-Client-WinStore

Host operating system No Examples include the following:n Windows 8.1n Windows 7, 64-bit Service Pack 1 (Build 7601 )n iPhone OS 5.1.1 (9B206)n Ubuntu 12.04.4 LTSn Mac OS X 10.8.5 (12F45)


24 VMware, Inc.

Table 1‑1. Data Collected from Horizon Clients for the Customer Experience Improvement Program(Continued)

Description


Host operating system kernel No Examples include the following:n Windows 6.1.7601 SP1n Darwin Kernel Version 11.0.0: Sun Apr 8 21:52:26 PDT

2012; root:xnu-1878.11.10~1/RELEASE_ARM_S5L8945Xn Darwin 11.4.2n Linux 2.6.32-44-generic #98-Ubuntu SMP Mon Sep 24

17:27:10 UTC 2012n unknown (for Windows Store)

Host operating system architecture No Examples include the following:n x86_64n i386n armv71n ARM

Host system model No Examples include the following:n Dell Inc. OptiPlex 960n iPad3,3n MacBookPro8,2n Dell Inc. Precision WorkStation T3400 (A04 03/21/2008)

Host system CPU No Examples include the following:n Intel(R) Core(TM)2 Duo CPU E8400 @ 3.00GHn Intel(R) Core(TM)2 Quad CPU Q6600 @ 2.40GHn unknown (for iPad)

Number of cores in the host system'sprocessor

No For example: 4

MB of memory on the host system No Examples include the following:n 4096n unknown (for Windows Store)

Number of USB devices connected No 2 (USB device redirection is supported only for Linux,Windows, and Mac clients.)

Maximum concurrent USB deviceconnections

No 2

USB device vendor ID No Examples include the following:n Kingstonn NECn Nokian Wacom

USB device product ID No Examples include the following:n DataTravelern Gamepadn Storage Driven Wireless Mouse


VMware, Inc. 25

Table 1‑1. Data Collected from Horizon Clients for the Customer Experience Improvement Program(Continued)

Description


USB device family No Examples include the following:n Securityn Human Interface Devicen Imaging

USB device usage count No (Number of times the device was shared)


26 VMware, Inc.

Using URIs to ConfigureHorizon Client 2

Using uniform resource identifiers (URIs), you can create a Web page or an email with links that end usersclick to start Horizon Client, connect to a server, and open a specific desktop or application with specificconfiguration options.

You can simplify the process of connecting to a remote desktop or application by creating Web or email linksfor end users. You create these links by constructing URIs that provide some or all the followinginformation, so that your end users do not need to supply it:

n Connection Server address

n Port number for Connection Server

n Active Directory user name

n RADIUS or RSA SecurID user name, if different from the Active Directory user name

n Domain name

n Desktop or application display name

n Actions including reset, log out, and start session

To construct a URI, you use the vmware-view URI scheme with Horizon Client specific path and query parts.

Note You can use URIs to start Horizon Client only if the client software is already installed on clientcomputers.


n “Syntax for Creating vmware-view URIs,” on page 27

n “Examples of vmware-view URIs,” on page 30

Syntax for Creating vmware-view URIsSyntax includes the vmware-view URI scheme, a path part to specify the desktop or application, and,optionally, a query to specify desktop or application actions or configuration options.

URI SpecificationUse the following syntax to create URIs to start Horizon Client:

vmware-view://[authority-part][/path-part][?query-part]

VMware, Inc. 27

The only required element is the URI scheme, vmware-view. For some versions of some client operatingsystems, the scheme name is case-sensitive. Therefore, use vmware-view.

Important In all parts, non-ASCII characters must first be encoded according to UTF-8 [STD63], and theneach octet of the corresponding UTF-8 sequence must be percent-encoded to be represented as URIcharacters.

For information about encoding for ASCII characters, see the URL encoding reference at http://www.utf8-chartable.de/.

authority-part Specifies the server address and, optionally, a user name, a non-default portnumber, or both. Underscores (_) are not supported in server names. Servernames must conform to DNS syntax.

To specify a user name, use the following syntax:

user1@server-address

You cannot specify a UPN address, which includes the domain. To specifythe domain, you can use the domainName query part in the URI.

To specify a port number, use the following syntax:

server-address:port-number

path-part Specifies the desktop or application. Use the desktop display name orapplication display name. This name is the one specified in HorizonAdministrator when the desktop or application pool was created. If thedisplay name has a space in it, use the %20 encoding mechanism to representthe space.

query-part Specifies the configuration options to use or the desktop or applicationactions to perform. Queries are not case-sensitive. To use multiple queries,use an ampersand (&) between the queries. If queries conflict with eachother, the last query in the list is used. Use the following syntax:

query1=value1[&query2=value2...]

Supported QueriesThis topic lists the queries that are supported for this type of Horizon Client. If you are creating URIs formultiple types of clients, such as desktop clients and mobile clients, see the Using VMware Horizon Clientguide for each type of client system.

action Table 2‑1. Values That Can Be Used With the action Query

Value Description

browse Displays a list of available desktops and applications hosted on thespecified server. You are not required to specify a desktop orapplication when using this action.If you use the browse action and specify a desktop or application,the desktop or application is highlighted in the list of availableitems.

start-session Opens the specified desktop or application. If no action query isprovided and the desktop or application name is provided,start-session is the default action.


28 VMware, Inc.

http://www.utf8-chartable.de/

Table 2‑1. Values That Can Be Used With the action Query (Continued)

Value Description

reset Shuts down and restarts the specified desktop. Unsaved data islost. Resetting a remote desktop is the equivalent of pressing theReset button on a physical PC. Specifying an application is notsupported. If you specify an application, an error message appears.If you do not specify a desktop or application, Horizon Client quitsall remote applications.

restart Shuts down and restarts the specified desktop. Restarting a remotedesktop is the equivalent of the Windows operating system restartcommand. The operating system usually prompts the user to saveany unsaved data before it restarts.

logoff Logs the user out of the guest operating system in the remotedesktop. If you specify an application, the action is ignored or theend user sees the warning message "Invalid URI action."

args Specifies command-line arguments to add to remote application launch. Usethe syntax args=value, where value is a string. Use percent encoding for thefollowing characters:

n For a colon (:), use %3A

n For a back slash (\), use %5C

n For a space ( ), use %20

n For a double quotation mark ("), use %22

For example, to specify the filename "My new file.txt" for the Notepad++application, use %22My%20new%20file.txt%22.

appProtocol For remote applications, valid values are PCOIP and BLAST. For example, tospecify PCoIP, use the syntax appProtocol=PCOIP.

defaultLaunchView Sets the default launch view for Horizon Client. Valid values are recent andservers.

desktopProtocol For remote desktops, valid values are PCOIP and BLAST. For example, tospecify PCoIP, use the syntax desktopProtocol=PCOIP.

domainName The NETBIOS domain name associated with the user who is connecting tothe remote desktop or application. For example, you might use mycompanyrather than mycompany.com.

tokenUserName Specifies the RSA or RADIUS user name. Use this query only if the RSA orRADIUS user name is different from the Active Directory user name. If youdo not specify this query and RSA or RADIUS authentication is required, theWindows user name is used. The syntax is tokenUserName=name.

Chapter 2 Using URIs to Configure Horizon Client

VMware, Inc. 29

unauthenticatedAccessEnabled

If this option is set to true, the Unauthenticated Access feature is enabled bydefault. If this option is set to false, the Unauthenticated Access feature isdisabled. When this option is set to "", the Unauthenticated Access feature isdisabled. The Log in anonymously using Unauthenticated Access option isavailable in the Horizon Client settings. An example of the syntax isunauthenticatedAccessEnabled=true.

unauthenticatedAccessAccount

Sets the account to use if the Unauthenticated Access feature is enabled. IfUnauthenticated Access is disabled, then this query is ignored. An exampleof the syntax using the anonymous1 user account isunauthenticatedAccessAccount=anonymous1.

Examples of vmware-view URIsYou can create hypertext links or buttons with the vmware-view URI scheme and include these links in emailor on a Web page. Your end users can click these links to, for example, open a particular remote desktopwith the startup options you specify.

URI Syntax ExamplesEach URI example is followed by a description of what the end user sees after clicking the URI link.

1 vmware-view://view.mycompany.com/Primary%20Desktop?action=start-session

Horizon Client starts and connects to the view.mycompany.com server. The login box prompts the user fora user name, domain name, and password. After a successful login, the client connects to the desktopwhose display name is displayed as Primary Desktop, and the user is logged in to the guest operatingsystem.

Note The default display protocol and window size are used. The default display protocol is PCoIP.The default window size is full screen.

2 vmware-view://view.mycompany.com:7555/Primary%20Desktop

This URI has the same effect as the previous example, except that it uses the nondefault port of 7555 forConnection Server. (The default port is 443.) Because a desktop identifier is provided, the desktop openseven though the start-session action is not included in the URI.

3 vmware-view://[email protected]/Finance%20Desktop?desktopProtocol=PCOIP

Horizon Client starts and connects to the view.mycompany.com server. In the login box, the User nametext box is populated with the name fred. The user must supply the domain name and password. Aftera successful login, the client connects to the desktop whose display name is displayed as FinanceDesktop, and the user is logged in to the guest operating system. The connection uses the PCoIPdisplay protocol.

4 vmware-view://view.mycompany.com/Calculator?action=start-session&appProtocol=BLAST

Horizon Client starts and connects to the view.mycompany.com server. In the login box, the user mustsupply the user name, domain name, and password. After a successful login, the client connects to theapplication whose display name is displayed as Calculator. The connection uses the VMware Blastdisplay protocol.

5 vmware-view://[email protected]/Finance%20Desktop?domainName=mycompany

Horizon Client starts and connects to the view.mycompany.com server. In the login box, the User nametext box is populated with the name fred, and the Domain text box is populated with mycompany. Theuser must supply only a password. After a successful login, the client connects to the desktop whosedisplay name is displayed as Finance Desktop, and the user is logged in to the guest operating system.


30 VMware, Inc.

6 vmware-view://view.mycompany.com/

Horizon Client starts and the user is taken to the login prompt for connecting to theview.mycompany.com server.

7 vmware-view://view.mycompany.com/Primary%20Desktop?action=reset

Horizon Client starts and connects to the view.mycompany.com server. The login box prompts the user fora user name, domain name, and password. After a successful login, Horizon Client displays a dialogbox that prompts the user to confirm the reset operation for Primary Desktop.

Note This action is available only if a Horizon administrator has enabled the desktop reset feature forthe desktop.

8 vmware-view://view.mycompany.com/Primary%20Desktop?action=restart

Horizon Client starts and connects to the view.mycompany.com server. The login box prompts the user fora user name, domain name, and password. After a successful login, Horizon Client displays a dialogbox that prompts the user to confirm the restart operation for Primary Desktop.

Note This action is available only if a Horizon administrator has enabled the desktop restart featurefor the desktop.

9 vmware-view://view.mycompany.com?action=reset

Horizon Client starts and connects to the view.mycompany.com server. The login box prompts the user fora user name, domain name, and password. After a successful login, Horizon Client displays a dialogbox that prompts the user to confirm the reset operation for all remote applications.

10 vmware-view://

If the client is already running, the Horizon Client application comes to the foreground. If the client isnot already running, Horizon Client starts.

11 vmware-view://?defaultlaunchview=recent

Horizon Client starts and the user sees the Recent tab.

12 vmware-view://10.10.10.10/My%20Notepad++?args=%22My%20new%20file.txt%22

Launches My Notepad++ on server 10.10.10.10 and passes the argument My new file.txt in theapplication launch command. The filename is enclosed in double quotes because it contains spaces.

13 vmware-view://10.10.10.10/Notepad++%2012?args=a.txt%20b.txt

Launches Notepad++ 12 on server 10.10.10.10 and passes the argument a.text b.txt in the applicationlaunch command. Because the argument is not enclosed in quotes, a space separates the filenames andthe two files are opened separately in Notepad++.

Note Applications can differ in the way they use command line arguments. For example, if you passthe argument a.txt b.txt to Wordpad, Wordpad will open only one file, a.txt.

14 vmware-view://view.mycompany.com/Notepad?

unauthenticatedAccessEnabled=true&unauthenticatedAccessAccount=anonymous1

Horizon Client starts and connects to the view.mycompany.com server using the anonymous1 user account.The Notepad application is launched without prompting the user to provide login credentials.

Chapter 2 Using URIs to Configure Horizon Client

VMware, Inc. 31

HTML Code ExamplesYou can use URIs to make hypertext links and buttons to include in emails or on Web pages. The followingexamples show how to use the URI from the first URI example to code a hypertext link that says, Test Link,and a button that says, TestButton.

<html>

<body>

<a href="vmware-view://view.mycompany.com/Primary%20Desktop?action=start-session">Test

Link</a><br>

<form><input type="button" value="TestButton" onClick="window.location.href=

'vmware-view://view.mycompany.com/Primary%20Desktop?action=start-session'"></form> <br>

</body>

</html>


32 VMware, Inc.

Managing Remote Desktop andApplication Connections 3

End users can use Horizon Client to connect to a server, edit the list of servers they connect to, log in to oroff of remote desktops, and use remote applications. For troubleshooting purposes, end users can also resetremote desktops and applications.

Depending on how you configure policies for remote desktops, end users might be able to perform manyoperations on their desktops.


n “Setting the Certificate Checking Mode in Horizon Client,” on page 33

n “Connect to a Remote Desktop or Application,” on page 34

n “Use Unauthenticated Access to Connect to Remote Applications,” on page 36

n “Share Access to Local Storage with Client Drive Redirection,” on page 37

n “Add a Remote Desktop or Application Shortcut to the Android Home Screen,” on page 38

n “Manage Server Shortcuts,” on page 39

n “Select a Favorite Remote Desktop or Application,” on page 39

n “Disconnecting From a Remote Desktop or Application,” on page 40

n “Log Off From a Remote Desktop,” on page 40

n “Manage Desktop and Application Shortcuts,” on page 41

n “Using Android 7.0 Nougat Multi-Window Modes with Horizon Client,” on page 41

n “Using Horizon Client with Samsung DeX,” on page 41

Setting the Certificate Checking Mode in Horizon ClientYou can determine whether client connections are rejected if any or some server certificate checks fail byconfiguring a setting in Horizon Client.

Certificate checking occurs for SSL connections between the server and Horizon Client. Certificateverification includes the following checks:

n Is the certificate intended for a purpose other than verifying the identity of the sender and encryptingserver communications? That is, is it the correct type of certificate?

n Has the certificate expired, or is it valid only in the future? That is, is the certificate valid according tothe computer clock?

VMware, Inc. 33

n Does the common name on the certificate match the host name of the server that sends it? A mismatchcan occur if a load balancer redirects Horizon Client to a server that has a certificate that does not matchthe host name entered in Horizon Client. Another reason a mismatch can occur is if you enter an IPaddress rather than a host name in the client.

n Is the certificate signed by an unknown or untrusted certificate authority (CA)? Self-signed certificatesare one type of untrusted CA.

To pass this check, the certificate's chain of trust must be rooted in the device's local certificate store.

Important For information about distributing a self-signed root certificate that users can install on theirAndroid devices, as well as instructions for installing a certificate on an Android device, see thedocumentation on the Google Web site, such as the Android 3.0 User's Guide.

To set the certificate checking mode, start Horizon Client and open Settings. In Settings, tap Securityoptions and tap Security mode. You have three choices:

n Never connect to untrusted servers. If any of the certificate checks fails, the client cannot connect to theserver. An error message lists the checks that failed.

n Warn before connecting to untrusted servers. If a certificate check fails because the server uses a self-signed certificate, you can click Continue to ignore the warning. For self-signed certificates, thecertificate name is not required to match the server name you entered in Horizon Client.

n Do not verify server identity certificates. This setting means that no certificate checking occurs.

If the certificate checking mode is set to Warn, you can still connect to a server that uses a self-signedcertificate.

If an administrator later installs a security certificate from a trusted certificate authority, so that all certificatechecks pass when you connect, this trusted connection is remembered for that specific server. In the future,if that server ever presents a self-signed certificate again, the connection fails. After a particular serverpresents a fully verifiable certificate, it must always do so.

Connect to a Remote Desktop or ApplicationTo connect to a remote desktop or application, you must provide the name of a server and supplycredentials for your user account.

Before you have end users access their remote desktops and applications, test that you can connect to aremote desktop or application from a client device. You might need to specify a server and supplycredentials for your user account.

Prerequisites

n Obtain login credentials, such as a user name and password, RSA SecurID user name and passcode,RADIUS authentication user name and passcode, or smart card personal identification number (PIN).

n Obtain the NETBIOS domain name for logging in. For example, you might use mycompany rather thanmycompany.com.

n Perform the administrative tasks described in “Preparing Connection Server for Horizon Client,” onpage 12.

n If you are outside the corporate network and require a VPN connection to access remote desktops andapplications, verify that the client device is set up to use a VPN connection and turn on that connection.

n Verify that you have the fully qualified domain name (FQDN) of the server that provides access to theremote desktop or application. Underscores (_) are not supported in server names. If the port is not 443,you also need the port number.


34 VMware, Inc.

n If you plan to use embedded RSA SecurID software, verify that you have the correct CT-KIP URL andactivation code. See “Using Embedded RSA SecurID Software Tokens,” on page 21.

n Configure the certificate checking mode for the SSL certificate presented by the server. See “Setting theCertificate Checking Mode in Horizon Client,” on page 33.

n If you plan to use fingerprint authentication, verify that the Fingerprint Authentication option isenabled and at least one fingerprint is enrolled on the Android device. For complete fingerprintauthentication requirements, see “Fingerprint Authentication Requirements,” on page 11.

Procedure

1 If a VPN connection is required, turn on the VPN.

2 On the Android device, tap the Horizon app icon.

3 Connect to a server.

Option Action

Connect to a new server Enter the name of a server, enter a description (optional), and tap Connect.

Connect to an existing server Tap the server shortcut on the Servers tab. Connections between Horizon Client and servers always use SSL. The default port for SSL connectionsis 443. If the server is not configured to use the default port, use the format shown in this example:view.company.com:1443.

4 If a smart card is required or optional, select the smart card certificate to use and enter your PIN.

If your smart card has only one certificate, that certificate is already selected. If there are manycertificates, you can scroll through the certificates.

5 If you are prompted for RSA SecurID credentials or RADIUS authentication credentials, either typeyour credentials or, if you plan to use an embedded RSA SecurID token, install an embedded token.

Option Action

Existing token If you use a hardware authentication token or software authenticationtoken on a smart phone, enter your user name and passcode. The passcodemight include both a PIN and the generated number on the token.

Install software token Tap External Token. In the Install Software Token dialog box, paste the CT-KIP URL or CTFString URL that your administrator sent to you in email. Ifthe URL contains an activation code, you do not need to enter anything inthe Password or Activation Code text box.

6 If you are prompted a second time for RSA SecurID credentials or RADIUS authentication credentials,

enter the next generated number on the token.

Do not enter your PIN, and do not enter the same generated number that you entered before. Ifnecessary, wait until a new number is generated.

If this step is required, it is required only when you mistype the first passcode or when configurationsettings in the RSA server change.

7 If you are prompted for a user name and password, supply your Active Directory credentials.

a Type the user name and password of a user who is entitled to use at least one desktop orapplication pool.

b Select a domain.

If the Domain drop-down menu is hidden, type the user name as username@domain ordomain\username.

Chapter 3 Managing Remote Desktop and Application Connections

VMware, Inc. 35

c (Optional) If the Enable Fingerprint check box is available, select it to use fingerprintauthentication.

The Enable Fingerprint check box is available only if biometric authentication is enabled on theserver and you have not previously authenticated with fingerprint authentication.

d (Optional) Select the Save Password check box if your administrator has enabled this feature and ifthe server certificate can be fully verified.

If this is the first time you are saving a password, you are prompted to activate the deviceadministrator, which is required to save a password on Android devices.

e Tap Connect.

If fingerprint authentication is enabled and you are logging in for the first time, your Active Directorycredentials are stored securely in the Android device's database for future use.

8 If you are prompted for fingerprint authentication, place your finger on the fingerprint sensor.

If you do not want to use fingerprint authentication, tap Cancel. You can connect to the server againand tap Use password to enter a user name and password.

9 (Optional) Tap the display protocol settings icon in the upper-right corner of the window to select thedisplay protocol to use.

VMware Blast provides better battery life and is the best protocol for high-end 3D and mobile deviceusers.

10 Tap a desktop or application to connect to it.

If you are connecting to a published desktop, and if the desktop is already set to use the Microsoft RDPdisplay protocol, you cannot connect immediately. You are prompted to have the system log you off theremote operating system so that a connection can be made with the PCoIP display protocol or theVMware Blast display protocol.

After you connect to a desktop or application for the first time, a shortcut for the desktop or application issaved to the Recent tab. The next time you want to connect to the remote desktop or application, you cantap the shortcut instead of tapping the server icon.

Use Unauthenticated Access to Connect to Remote ApplicationsA Horizon administrator can use the Unauthenticated Access feature to create Unauthenticated Access usersand entitle those users to remote applications on a Connection Server instance. Unauthenticated Accessusers can log in to the server anonymously to connect to their remote applications.

Before you have end users access a remote application with the Unauthenticated User feature, test that youcan connect to the remote application from a client device. You might need to specify a server and supplycredentials for your user account.

Prerequisites

n Perform the administrative tasks described in “Preparing Connection Server for Horizon Client,” onpage 12.

n Set up Unauthenticated Access users on the Connection Server instance. For information, see"Providing Unauthenticated Access for Published Applications" in the View Administration document.

n Configure the certificate checking mode for the SSL certificate presented by the server. See “Setting theCertificate Checking Mode in Horizon Client,” on page 33.

n If you are accessing remote applications outside of the corporate network, verify that your client deviceis set up to use a VPN connection and turn on that connection.


36 VMware, Inc.

Procedure

1 If a VPN connection is required, turn on the VPN.

2 On the Android device, tap the Horizon app icon.

3 Tap the Settings (gear) icon in the upper-right corner of the Horizon Client window, tapUnauthenticated access, and select the Unauthenticated access check box.

4 Connect to the server on which you have unauthenticated access to remote applications.

Option Description

Connect to a new server Enter the name of a server, enter a description (optional), and tap Connect.

Connect to an existing server Tap the server shortcut on the Servers tab. Connections between Horizon Client and servers always use SSL. The default port for SSL connectionsis 443. If the server is not configured to use the default port, use the format shown in this example:view.company.com:1443.

5 When the login window appears, select a user account from the User account drop-down menu, ifrequired.

If only one user account is available, the user account is automatically selected.

6 (Optional) Select the Always use this account check box to bypass the login window the next time youconnect to the server.

To deselect this setting before you connect to the server the next time, touch and hold the servershortcut until the context menu appears, tap Edit, tap Forget the saved Unauthenticated Accessaccount (name), and tap Done.

7 Tap Connect to log in to the server.

The application selection window appears.

8 Tap an application icon to start the application.

After you connect to a remote application for the first time, a shortcut for the application is saved to theRecent tab. The next time you want to connect to the application, you can tap the shortcut instead of tappingthe server icon.

Share Access to Local Storage with Client Drive RedirectionYou can configure Horizon Client to share local storage with a remote desktop or application. This feature iscalled client drive redirection.

In a Windows remote desktop or remote application, local storage appears in the Devices and drives sectionin the This PC folder, or in the Other section in the Computer folder. The folders and storage devices thatyou select for sharing use the naming format name on HorizonClient.

Prerequisites

n Enable the client drive redirection feature. This task includes installing View Agent 6.1.1 or later, orHorizon Agent 7.0 or later, and enabling the agent Client Drive Redirection option. It can also includesetting policies or registry settings to control client drive redirection behavior. For more information, seethe Configuring Remote Desktop Features in Horizon 7 document.

n Connect to the remote desktop or application with which you want to share local storage. If you havenot logged in at least once, become familiar with the procedure “Connect to a Remote Desktop orApplication,” on page 34.


VMware, Inc. 37

Procedure

1 Open Settings and tap Local storage redirection.

If you are connected to the remote desktop or application in full-screen mode, tap the Horizon ClientTools radial menu icon and tap the gear icon. If you are not using full-screen mode, Settings is in themenu in the upper-right corner of the Horizon Client toolbar.

2 Tap Local Storage Redirection and configure the local storage redirection options.

Option Action

Automatically share all removablestorage devices

Select the Enable auto direct for mounted storage check box. Allremovable storage devices mounted to your device are automaticallyshared with the remote desktop or application. This option is selected bydefault.

Do not automatically share allremovable storage devices

Deselect the Enable auto direct for mounted storage check box. The nexttime you connect to the remote desktop or application, removable storagedevices mounted to your device are not automatically shared with theremote desktop or application.Note Deselecting the Enable auto direct for mounted storage check boxdoes not stop sharing a removable storage device that is already sharedwith the remote desktop or application.

Share a specific folder or removablestorage device

Select the check box next to the name of the local folder or removablestorage device in the list. The device becomes available in the remotedesktop or application.When you connect a removable storage device, its name appears in the list.When you disconnect a removable storage device, its name is removedfrom the list.

Stop sharing a specific folder orremovable storage device

Deselect the check box next to the name of the local folder or removablestorage device in the list. The device is no longer available in the remotedesktop or application.

3 Tap OK to save your settings.

What to do next

Verify your changes from within the remote desktop or application.

n From within a Windows remote desktop, open the This PC folder and look in the Devices and drivessection, or open the Computer folder and look in the Other section. If you shared a folder or storagedevice, you should see the folder or device. Shared folders and storage devices use the naming formatname on HorizonClient.

n From a remote application, select File > Open or File > Save As, if applicable. If you shared a folder orstorage device, you should be able to navigate to the folder or device. Shared folders and storagedevices use the naming format name on HorizonClient.

Add a Remote Desktop or Application Shortcut to the Android HomeScreen

You can add a shortcut for a remote desktop or application to the Android home screen and then tap theshortcut to open the remote desktop or application.

On Android 4 through 7 devices, Horizon Client adds the remote desktop or application shortcut to theAndroid home screen.

On Android 8 devices, remote desktop and application shortcuts appear as entries above the Horizon appicon when you touch and hold the app icon. You can drag an entry from the app icon to the Android homescreen to create a shortcut directly on the Android home screen.


38 VMware, Inc.

When Horizon Client for Android is installed on a Chromebook, Horizon Client adds the remote desktop orapplication shortcut to the Chrome App Launcher.

This feature is not available on Amazon devices, on Android devices that are managed by AirWatch, orwhen you connect to the server anonymously by using the Unauthenticated Access feature.

Procedure

1 You can add a desktop or application shortcut before or after you connect to a server.

If you are not connected to a server, you must have connected to the remote desktop or application atleast once from the device so that a shortcut for the desktop or application appears on the Recent tab.

Option Action

If you have not connected to aserver

On the Recent tab, touch and hold the shortcut until Add To Homeappears at the bottom of the window and then drag the shortcut to Add ToHome.

If you are connected to a server On the All or Favorites tab, touch and hold the desktop or applicationshortcut until the context menu appears and tap Add To Home.

2 Type a name for the shortcut and tap OK.

If the name is longer than 12 characters, the extra characters do not appear on the Android home screen.

Manage Server ShortcutsAfter you connect to a server, Horizon Client creates a server shortcut. You can edit and remove servershortcuts.

Horizon Client saves the server name or IP address in a shortcut, even if you mistype the server name ortype the wrong IP address. You can delete or change this information by editing the server name or IPaddress. If you do not type a server description, the server name or IP address becomes the serverdescription.

Server shortcuts can appear on multiple pages and you can swipe across pages to see more shortcuts.Horizon Client creates new pages, as needed, to accommodate all of your server shortcuts.

Procedure

1 On the Servers tab, touch and hold the server shortcut until the context menu appears.

2 Use the context menu to delete the server or edit the server name, server description, or user name.

You can also remove a credential that was saved for fingerprint authentication by tapping RemoveCredential.

Select a Favorite Remote Desktop or ApplicationYou can select remote desktops and applications as favorites. Favorites are identified by a star. The star helpsyou quickly find your favorite desktops and applications. Your favorite selections are saved, even after youlog off from the server.

Prerequisites

Obtain the credentials you need to connect to the server, such as a user name and password or RSA SecurIDand passcode.

Procedure

1 On the Servers tab, tap the server shortcut to connect to the server.


VMware, Inc. 39

2 If prompted, supply your RSA user name and passcode, your Active Directory user name andpassword, or both.

3 Perform these steps to select or deselect a desktop or application as a favorite.

Option Action

Select a favorite Touch and hold the desktop or application name until the context menuappears and tap Mark as Favorite. A star appears in the upper right cornerof the name and the name appears on the Favorites tab.

Deselect a favorite On the All or Favorites tab, touch and hold the desktop or applicationname until the context menu appears and tap Unmark Favorite. A star nolonger appears in the upper right corner of the name and the namedisappears from the Favorites tab.

4 (Optional) Tap the Favorites tab to display only favorite desktops or applications.

You can tap the All tab to display all the available desktops and applications.

Disconnecting From a Remote Desktop or ApplicationYou can disconnect from a remote desktop without logging off, so that applications remain open on theremote desktop. You can also disconnect from a remote application so that the remote application remainsopen.

On a mobile device, when you are using a remote desktop or application in full-screen mode, you candisconnect by tapping the Horizon Client Tools radial menu icon and tapping the Disconnect icon. If youare not using full-screen mode, Disconnect is in the menu in the upper-right corner of the Horizon Clienttoolbar.

On a thin client, when you are connected to a remote desktop or application, you disconnect by clicking theDisconnect icon in the Unity Touch sidebar or in a pop-up menu, depending on your thin client model. Formore information, see “Using Horizon Client on a Thin Client,” on page 20.

Note A Horizon administrator can configure a remote desktop to automatically log off when it isdisconnected. In that case, any open programs in the remote desktop are stopped.

Log Off From a Remote DesktopYou can log off from a remote desktop operating system, even if you do not have a desktop open inHorizon Client. If you are currently connected to and logged in to a remote desktop, you can use theWindows Start menu to log off. After Windows logs you off, the desktop is disconnected.

Prerequisites

Obtain the credentials that you use to log in, such as your Active Directory user name and password, RSASecurID user name and passcode, or RADIUS authentication user name and passcode.

Procedure

1 On the Servers tab, tap the server shortcut.


3 Touch and hold the desktop name until the context menu appears.

You can perform this step from either the All or Favorites tab.

4 Tap Log Off in the context menu.

Any unsaved files that are open on the remote desktop are closed during the logoff operation.


40 VMware, Inc.

What to do next

Tap the Android Back button or the Disconnect icon in the upper-right corner of the window and tap LogOut to disconnect from the server.

Manage Desktop and Application ShortcutsAfter you connect to a remote desktop or application, Horizon Client saves a shortcut for the recently useddesktop or application. You can rearrange and remove these shortcuts.

Desktop and application shortcuts can appear on multiple pages and you can swipe across pages to seemore shortcuts. Horizon Client creates new pages, as needed, to accommodate all of your shortcuts.

Procedure

n Perform these steps to remove a desktop or application shortcut from the Recent tab.

a Touch and hold the shortcut until Remove Shortcut appears at the bottom of the window.

b Drag the shortcut to Remove Shortcut.

n To move a desktop or application shortcut, touch and hold the shortcut and drag it to the new location.

You cannot drag a shortcut to another page unless that page already exists.

Using Android 7.0 Nougat Multi-Window Modes with Horizon ClientAndroid 7.0 Nougat allows several apps to share the screen at the same time. You can use split-screen modewith Horizon Client on an Android 7.0 Nougat device. Horizon Client does not support picture-in-picturemode.

With split-screen mode, you can run Horizon Client and another app side-by-side, or one-above-the other. Adividing line separates the two apps, and you can make one app larger and the other app smaller.

Using Horizon Client with Samsung DeXIf the Android device supports Samsung DeX, you can use Horizon Client in DeX desktop mode.

When the device is in DeX desktop mode, Horizon Client treats the device as a thin client and Thin Clientmode is enabled. For more information, see “Using Horizon Client on a Thin Client,” on page 20.

The following features are supported when you use Horizon Client in Horizon DeX desktop mode:

n You can configure Horizon Client to start automatically when you switch to DeX desktop mode. See “Enable the DeX Mode Auto Launch Feature,” on page 41.

n Desktop and application sessions continue to run after you enter or exit from DeX desktop mode.

n If Horizon Client is maximized, remote desktops enter full-screen mode after you switch to DeXdesktop mode..

n You can use the language switch key on a Samsung physical keyboard to switch the language inputmethod in a remote desktop.

Enable the DeX Mode Auto Launch FeatureYou can configure Horizon Client to start automatically when you switch the Android device to DeXdesktop mode.

If you added a desktop or application shortcut to the Android home screen, Horizon Client connects to themost recent shortcut after Horizon Client starts. For information about adding shortcuts to the Androidhome screen, see “Add a Remote Desktop or Application Shortcut to the Android Home Screen,” onpage 38.


VMware, Inc. 41

The DeX mode auto launch feature is disabled by default.

You cannot enable the DeX mode auto launch feature if a default Connection Server instance is configuredfor Horizon Client.

Prerequisites

Verify that the Android device supports Samsung DeX.

Procedure

1 Before you log in to a server, tap the Settings (gear) icon in the upper-right corner of the Horizon Clientwindow.

2 Tap Display, tap Dex Mode Auto Launch, and select the Dex Mode Auto Launch check box.


42 VMware, Inc.

Using a Microsoft Windows Desktopor Application 4

Horizon Client for Android includes additional features to aid in navigation on Android devices and thinclients. Users can use external devices with remote desktops and applications, copy text and images fromclient devices to remote desktops and applications, and save documents in remote applications.


n “Feature Support Matrix for Android,” on page 44

n “Input Devices, Keyboards, and Keyboard Settings,” on page 46

n “Enable the Japanese 106/109 Keyboard Layout,” on page 46

n “Using the Real-Time Audio-Video Feature,” on page 47

n “Using Native Operating System Gestures with Touch Redirection,” on page 47

n “Using the Unity Touch Sidebar with a Remote Desktop,” on page 48

n “Using the Unity Touch Sidebar with a Remote Application,” on page 50

n “Horizon Client Tools on a Mobile Device,” on page 52

n “Gestures,” on page 54

n “Multitasking,” on page 55

n “Copying and Pasting Text and Images,” on page 55

n “Saving Documents in a Remote Application,” on page 56

n “Screen Resolutions and Using External Displays,” on page 56

n “PCoIP Client-Side Image Cache,” on page 57

n “Internationalization and International Keyboards,” on page 58

VMware, Inc. 43

Feature Support Matrix for AndroidSome features are supported on one type of Horizon Client but not on another.

Table 4‑1. Features Supported on Windows Desktops for Android Horizon Clients

Feature

Windows10Desktop

Windows8.xDesktop

Windows7Desktop

WindowsVistaDesktop

Windows XPDesktop

WindowsServer2008/2012 R2 orWindowsServer 2016Desktop

RSA SecurID or RADIUS X X X Limited Limited X

Single sign-on X X X Limited Limited X

RDP display protocol

PCoIP display protocol X X X Limited Limited X

VMware Blast displayprotocol

X X X X

USB redirection

Client drive redirection X X X X

Real-Time Audio-Video X X X X

Wyse MMR

Windows 7 MMR

Virtual printing

Location-based printing X X X Limited Limited X

Smart cards X X X Limited Limited X

Multiple monitors

Windows 10 desktops require View Agent 6.2 or later or Horizon Agent 7.0 or later. Windows Server 2012R2 desktops require View Agent 6.1 or later or Horizon Agent 7.0 or later. Windows Server 2016 desktopsrequire Horizon Agent 7.0.2 or later.

Important View Agent 6.1 and later and Horizon Agent 7.0 and later releases do not support Windows XPand Windows Vista desktops. View Agent 6.0.2 is the last View release that supports these guest operatingsystems. Customers who have an extended support agreement with Microsoft for Windows XP and Vista,and an extended support agreement with VMware for these guest operating systems, can deploy the ViewAgent 6.0.2 version of their Windows XP and Vista desktops with Connection Server 6.1.

For descriptions of these features, see the View Planning document.

Feature Support for Published Desktops on RDS HostsRDS hosts are server computers that have Windows Remote Desktop Services and View Agent orHorizon Agent installed. Multiple users can have desktop sessions on an RDS host simultaneously. An RDShost can be either a physical machine or a virtual machine.

Note The following table contains rows only for the features that are supported. Where the text specifies aminimum version of View Agent, the text "and later" is meant to include Horizon Agent 7.0.x and later.


44 VMware, Inc.

Table 4‑2. Features Supported for RDS Hosts with View Agent 6.0.x or Later, or Horizon Agent 7.0.x orLater, Installed

FeatureWindows Server 2008 R2RDS Host

Windows Server 2012RDS Host

Windows Server 2016 RDSHost

RSA SecurID or RADIUS X X Horizon Agent 7.0.2 and later

Smart card View Agent 6.1 and later View Agent 6.1 and later Horizon Agent 7.0.2 and later

Single sign-on X X Horizon Agent 7.0.2 and later

RDP display protocol (fordesktop clients)

X X Horizon Agent 7.0.2 and later

PCoIP display protocol X X Horizon Agent 7.0.2 and later

VMware Blast displayprotocol

Horizon Agent 7.0 and later Horizon Agent 7.0 andlater

Horizon Agent 7.0.2 and later

HTML Access View Agent 6.0.2 and later(virtual machine only)

View Agent 6.0.2 andlater (virtual machineonly)


Client drive redirection View Agent 6.1.1 and later View Agent 6.1.1 andlater


Virtual printing (for desktopclients)

View Agent 6.0.1 and later(virtual machine only)


Horizon Agent 7.0.2 and later(virtual machine only)

Location-based printing View Agent 6.0.1 and later(virtual machine only)


Horizon Agent 7.0.2 and later(virtual machine only)

Multiple monitors (fordesktop clients)


Unity Touch (for mobile andChrome OS clients)


Real-Time Audio-Video(RTAV)

Horizon Agent 7.0.2 andlater

Horizon Agent 7.0.2 andlater


For information about which editions of each guest operating system are supported, see the View Installationdocument.

Limitations for Specific FeaturesSpecific features that are supported on Windows desktops for Horizon Client for Android have certainrestrictions.

Table 4‑3. Requirements for Specific Features

Feature Requirements

Location-based printing for Windows Server2008 R2 desktops, published desktops (onvirtual machine RDS hosts), and remoteapplications

Horizon 6.0.1 with View and later servers.

Smart cards for published desktops View Agent 6.1 and later or Horizon Agent 7.0 and later.

Real-Time Audio-Video See “System Requirements for Real-Time Audio-Video,” on page 9.

Client drive redirection View Agent 6.1.1 and later or Horizon Agent 7.0 and later.

Chapter 4 Using a Microsoft Windows Desktop or Application

VMware, Inc. 45

Feature Support for Linux DesktopsSome Linux guest operating systems are supported if you have View Agent 6.1.1 or later or Horizon Agent7.0 or later. For a list of supported Linux operating systems and information about supported features, seethe Setting Up Horizon 6 for Linux Desktops or Setting Up Horizon 7 for Linux Desktops document.

Input Devices, Keyboards, and Keyboard SettingsHorizon Client supports Bluetooth and docked keyboard devices and keyboards. You can also setpreferences for settings such as auto-capitalization and text correction.

External Keyboards and Input DevicesFor information about the devices that a specific tablet supports, see the documentation from the tabletmanufacturer.

External keyboards are sometimes automatically detected by Horizon Client. For some external keyboards,you must either tap the tablet screen with three fingers at the same time, or you must tap the Keyboard icon.If you are using a remote desktop or application in full-screen mode, the Keyboard icon is in theHorizon Client Tools radial menu. If you are not using full-screen mode, the Keyboard icon is on theHorizon Client toolbar.

Note On Kindle Fire tablets, tapping with three fingers does not display the onscreen keyboard. You caninstead use the Keyboard icon to display the onscreen keyboard.

After the external keyboard is detected, you might not be able to use the Horizon Client Tools or three-fingertap to display the onscreen keyboard. You might first have to deactivate the external keyboard by pressingits Eject key.

International Onscreen KeyboardsWith the correct input methods installed, you can input characters for the following languages: English-United States, Japanese, French, German, Simplified Chinese, Traditional Chinese, Korean, and Spanish.

To choose a language for the keyboard or voice, tap the Keyboard Settings key on the onscreen keyboard.The Keyboard Settings key is the left-most key on the bottom row of the onscreen keyboard. When youfinish selecting settings, tap the Android Back button to dismiss the dialog box.

Enable the Japanese 106/109 Keyboard LayoutIf you are connected to a Windows XP desktop, you can configure Horizon Client to use the Japanese106/109 keyboard layout.

Prerequisites

Use Horizon Client to connect to a Windows XP desktop that has the Japanese keyboard layout enabled.

Procedure

1 Open Settings and tap Keyboard.

If you are using the remote desktop in full-screen mode, tap the Horizon Client Tools radial menu iconand tap the gear icon. If you are not using full-screen mode, Settings is in the menu in the upper-rightcorner of the Horizon Client toolbar. If you are not connected to a remote desktop or application, tapthe gear icon in the upper right corner of the Horizon Client window.


46 VMware, Inc.

2 Tap Use Japanese 106/109 Keyboard Layout to select the check box.

This setting is disabled if the keyboard layout on the Windows XP desktop is not set to Japanese or ifthe desktop is not running Windows XP.

Using the Real-Time Audio-Video FeatureWith the Real-Time Audio-Video feature, you can use the client device's built-in cameras and microphonesin a remote desktop. Real-Time Audio-Video is compatible with standard conferencing applications such asSkype, WebEx, and Google Hangouts.

Real-Time Audio-Video is enabled by default when you install Horizon Client on the client device.

For information about setting up the Real-Time Audio-Video feature on a remote desktop, see theConfiguring Remote Desktop Features in Horizon 7 document.

When you install Horizon Client on an Android 6 or later device, Horizon Client prompts you forpermission to access the camera and microphone. You must grant permission for the camera andmicrophone to work with the remote desktop. You can enable or disable access to the camera or microphonein the Android Settings app. For Android devices earlier than Android 6, permission to the camera andmicrophone is opened by default.

If the camera is currently being used by another app, it cannot be used by the remote desktopsimultaneously. Also, if the camera is being used by the remote desktop, it cannot be used by the clientdevice at the same time.

If the client device has both a front and a back camera, you can select which camera to use in the remotedesktop. If you are using a remote desktop in full-screen mode, tap the Horizon Client Tools radial menuicon, tap the gear icon, tap Camera, tap Select a camera, and tap the camera to use. If you are not using full-screen mode, Settings is in the menu in the upper-right corner of the Horizon Client toolbar. The Camerasetting is available only when the camera is started.

Using Native Operating System Gestures with Touch RedirectionYou can use native operating system gestures from a touch-based mobile device when you are connected toa Windows 8, Windows 10, or Windows Server 2012 remote desktop, or to a remote application that ishosted on Windows Server 2012. For example, you can touch, hold, and release an item on a Windows 8desktop to display the item's context menu.

When touch redirection is enabled, you can use only native operating system touch gestures. Horizon Clientlocal gestures, such as double-click and pinch, no longer work. You must drag the Unity Touch tab button todisplay the Unity Touch sidebar.

Touch redirection is enabled by default when you connect to a Windows 8, Windows 10, or Windows Server2012 remote desktop, or to a remote application that is hosted on Windows Server 2012.

To disable touch redirection, open Settings, tap Touch, and deselect the Windows native touch gesturescheck box. If you are connected to a remote desktop or application in full-screen mode, tap theHorizon Client Tools radial menu icon and tap the gear icon. If you are not using full-screen mode, Settingsis in the menu in the upper-right corner of the Horizon Client toolbar. If you are not connected to a remotedesktop or application, tap the gear icon in the upper right corner of the Horizon Client window.


VMware, Inc. 47

Using the Unity Touch Sidebar with a Remote DesktopYou can quickly navigate to a remote desktop application or file from a Unity Touch sidebar. From thissidebar, you can open files and applications, switch between running applications, and minimize, maximize,restore, or close windows and applications in a remote desktop.

The Unity Touch feature is available only if a Horizon administrator has enabled it. If users have a floatingdesktop, users’ favorite applications and files can be saved only if Windows roaming user profiles areconfigured for the remote desktop. A Horizon administrator can also create a default Favorite Applicationslist that end users see the first time the sidebar appears. For more information, see "Configuring UnityTouch" in the Configuring Remote Desktop Features in Horizon 7 document.

If the Unity Touch feature is enabled, the sidebar appears on the left side of the window when you firstaccess a remote desktop.

Figure 4‑1. Unity Touch Sidebar for a Remote Desktop on a Mobile Device

Figure 4‑2. Unity Touch Sidebar for a Remote Desktop on a Thin Client

If you access a desktop that has Unity Touch enabled but the sidebar is not displayed, you can see a tab onthe left side of the window. Besides swiping this tab to the right to open the sidebar, you can slide the tab upor down.


48 VMware, Inc.

From this sidebar, you can perform many actions on a file or application.

Table 4‑4. Unity Touch Sidebar Actions for a Remote Desktop

Action Procedure

Show or hide the onscreenkeyboard

(Thin client only) Select the Keyboard icon.

Change the Horizon Clientsettings

(Thin client only) Select the Settings icon.

Disconnect from the desktop (Thin client only) Select the Disconnect icon.

Show the sidebar Swipe the tab to the right. When the sidebar is open, you cannot perform actions on thedesktop window or the Horizon Client Tools radial menu.

Hide the sidebar Swipe the tab to the left to close the sidebar. When the sidebar is open, you cannotperform actions on the desktop window or the Horizon Client Tools radial menu.

Navigate to an application Tap All Programs and navigate to the application just as you would from the WindowsStart menu.

Navigate to a file Tap My Files to access the User folder, and navigate to the file. My Files includesfolders such as My Pictures, My Documents, and Downloads.My Files includes the folders in the user profile (%USERPROFILE% directory). If yourelocate the system folder in the %USERPROFILE% directory, the My Files menu canalso display content from the relocated folder, whether it is a local relocated folder or anetwork share folder.

Search for an application or file n Tap in the Search box and type the name of the application or file.n To use voice dictation, tap the microphone on the keyboard.n To launch an application or file, tap the name of the application or file in the search

results.n To return to the home view of the sidebar, tap the X to close the Search box.

Open an application or file Tap the name of the file or application in the sidebar. The application starts and thesidebar closes.

Switch between runningapplications or open windows

Tap the application name under Running Applications. If more than one file is openfor one application, tap the chevron (>) next to the application to expand the list.

Minimize a running applicationor window

Touch and hold the application name under Running Applications until the contextmenu appears. Tap Minimize.

Maximize a runningapplication or window

Touch and hold the application name under Running Applications until the contextmenu appears. Tap Maximize.

Close a running application orwindow

Touch and hold the application name under Running Applications until the contextmenu appears. Tap Close.

Restore a running applicationor window to its previous sizeand position

Touch and hold the application name under Running Applications until the contextmenu appears. Tap Restore.

Create a list of favoriteapplications or files

1 Search for the application or file, or tap Manage under the Favorite Applicationsor Favorite Documents list.

If the Manage bar is not visible, tap the chevron (>) next to Favorite Applicationsor Favorite Files.

2 Tap the check box next to the names of your favorites in the search results or in thelist of available applications or files.

The favorite that you add last appears at the top of your favorites list.Your favorites are remembered across all of your mobile devices so that, for example,you have the same list whether using your smart phone or your tablet.


VMware, Inc. 49

Table 4‑4. Unity Touch Sidebar Actions for a Remote Desktop (Continued)

Action Procedure

Remove an application or filefrom the favorites list

1 Search for the application or file, or tap Manage under the Favorite Applicationsor Favorite Dcuments list.

If the Manage bar is not visible, tap the chevron (>) next to Favorite Applicationsor Favorite Documents.

2 Tap to remove the check mark next to the name of the application or file in thefavorites list.

Reorder an application or file inthe favorites list

1 Tap Manage under the Favorite Applications or Favorite Documents list.

If the Manage bar is not visible, tap the chevron (>) next to Favorite Applicationsor Favorite Documents.

2 In the favorites list, touch and hold the handle on the left side of the application orfile name and drag the favorite up or down the list.

Using the Unity Touch Sidebar with a Remote ApplicationYou can quickly navigate to a remote application from a Unity Touch sidebar. From this sidebar, you canlaunch applications, switch between running applications, and minimize, maximize, restore, or close remoteapplications. You can also switch to a remote desktop.

The Unity Touch feature is available only if a Horizon administrator has enabled it.

When you access a remote application, the Unity Touch sidebar appears on the left side of the window. If theUnity Touch sidebar is closed, a tab appears on the left side of the window. You can swipe this tab to theright to reopen the sidebar. You can also slide the tab up or down.

Figure 4‑3. Unity Touch Sidebar for a Remote Application on a Mobile Device


50 VMware, Inc.

Figure 4‑4. Unity Touch Sidebar for a Remote Application on a Thin Client

From the Unity Touch sidebar, you can perform many actions on a remote application.

Table 4‑5. Unity Touch Sidebar Actions for a Remote Application

Action Procedure

Show or hide the onscreenkeyboard

(Thin client only) Select the Keyboard icon.

Modify Horizon Client settings (Thin client only) Select the Settings icon.

Disconnect from the application (Thin client only) Select the Disconnect icon.

Show the sidebar Swipe the tab to the right to open the sidebar. When the sidebar is open, you cannotperform actions on the application window.

Hide the sidebar Swipe the tab to the left to close the sidebar. When the sidebar is open, you cannotperform actions on the application window.

Switch between runningapplications

Tap the application under Current Connection.

Open an application Tap the name of the application under Applications in the sidebar. The applicationstarts and the sidebar closes.

Close a running application 1 Touch and hold the application name under Current Connection until thecontext menu appears.

2 Tap Close.

Minimize a running application 1 Touch and hold the application name under Current Connection until thecontext menu appears.

2 Tap Minimize.

Maximize a running application 1 Touch and hold the application name under Current Connection until thecontext menu appears.

2 Tap Maximize.

Restore a running application 1 Touch and hold the application name under Current Connection until thecontext menu appears.

2 Tap Restore.

Switch to a remote desktop Tap the desktop name under Desktops.


VMware, Inc. 51

Horizon Client Tools on a Mobile DeviceOn a mobile device, the Horizon Client Tools include buttons for displaying the onscreen keyboard, virtualtouchpad, configuration settings, and a virtual keypad for arrow keys and function keys.

When you use a remote desktop or application in full-screen mode, the Horizon Client Tools radial menuicon appears at the right edge of the window. You can drag the radial menu icon to relocate it. Tap to expandthe radial menu and display icons for each tool, which you can tap to select. Tap outside the tool icons tocollapse the icons back into the radial menu icon.

If the remote desktop or application is not in full-screen mode, a toolbar appears on the right side of themenu bar at the top of the window. You can tap the Full Screen icon on the toolbar to enter full-screenmode. When you are in full-screen mode, you can tap a similar icon in the radial menu to exit full-screenmode.

The radial menu includes several tools.

Table 4‑6. Radial Menu Icons

Icon Description

Horizon Client Tools radial menu

Disconnect

Onscreen keyboard (toggles to show or hide)

Settings

Navigation keys

Virtual touchpad

Gesture help

Onscreen KeyboardThe onscreen keyboard has more keys than the standard onscreen keyboard, for example, Control keys andfunction keys are available. To display the onscreen keyboard, tap the screen with three fingers at the sametime or tap the Keyboard icon.

If you are using a remote desktop or application in full-screen mode, the Keyboard icon is in theHorizon Client Tools radial menu. If you are not using full-screen mode, the Keyboard icon is on theHorizon Client toolbar.

You can also use the feature that displays the onscreen keyboard whenever you tap a text field, such as in anote or new contact. If you then tap in an area that is not a text field, the keyboard is dismissed.


52 VMware, Inc.

To turn this feature on or off, use the Keyboard popup and Keyboard dismiss options. To display theseoptions when you are using a remote desktop or application in full-screen mode, tap the Horizon ClientTools radial menu icon, tap the gear icon, and tap Keyboard. If you are not using full-screen mode, Settingsis in the menu in the upper-right corner of the Horizon Client toolbar. If you are not connected to a remotedesktop or application, tap the gear icon in the upper right corner of the Horizon Client window.

Note On Kindle Fire tablets, tapping with three fingers does not display the onscreen keyboard. You caninstead tap the Keyboard icon on the Horizon Client toolbar to display the onscreen keyboard.

Even if you use an external keyboard, a one-row onscreen keyboard might still appear, which containsfunction keys, and the Ctrl, Alt, Win, and arrow keys. Some external keyboards do not have all these keys.

Sending a String of CharactersFrom the onscreen keyboard, tap the pen icon on the left side of the Ctrl key to display the local input buffer.Text that you type into this text box is not sent to an application until you tap Send. For example, if youopen an application such as Notepad and tap the pen icon, the text that you type does not appear in theNotepad application until you tap Send.

Use this feature if you have a poor network connection. That is, use this feature if, when you type acharacter, the character does not immediately appear in the application. With this feature, you can quicklytype up to 1,000 characters and then either tap Send or tap Return to have all 1,000 characters appear atonce in the application.

Navigation KeysTap the Ctrl/Page icon in the Horizon Client Tools or onscreen keyboard to display the navigation keys.These keys include Page Up, Page Down, arrow keys, function keys, and other keys that you often use inWindows environments, such as Alt, Del, Shift, Ctrl, Win, and Esc. You can press and hold arrow keys forcontinuous key strokes. For a picture of the Ctrl/Page icon, see the table at the beginning of this topic.

Use the Shift key on this keypad when you need to use key combinations that include the Shift key, such asCtrl+Shift. To tap a combination of these keys, such as Ctrl+Alt+Shift, first tap the onscreen Ctrl key. Afterthe Ctrl key turns blue, tap the onscreen Alt key. After the Alt key turns blue, tap the onscreen Shift key. Asingle onscreen key is provided for the key combination Ctrl+Alt+Del.

Onscreen Touchpad and Full-Screen TouchpadThe virtual touchpad can be either regular-size, to resemble a touchpad on a laptop computer, or full screen,so that the entire device screen is a touchpad.

By default, when you tap the touchpad icon, you can touch anywhere on the screen to move the mousepointer. The screen becomes a full-screen touchpad.

n Moving your finger around the touchpad creates a mouse pointer that moves around the remotedesktop or application.

n You can use the regular-size and full-screen virtual touchpad for single-clicking and double-clicking.

n The regular touchpad also contains left-click and right-click buttons.

n You can tap with two fingers and then drag to scroll vertically.

You can drag the regular-size virtual touchpad to the side of the device so that you can use your thumb tooperate the touchpad while you are holding the device.

You can make the virtual touchpad resemble the touchpad on a laptop, including right-click and left-clickbuttons, by setting the Full screen touchpad setting to off. If you are using the remote desktop or applicationin full-screen mode, tap the Horizon Client Tools radial menu icon, tap the gear icon, tap Touch, anddeselect the Full screen touchpad setting.


VMware, Inc. 53

To adjust how quickly the pointer moves when you use the touchpad, adjust the Touchpad sensitivityoption. If you are using the remote desktop or application in full-screen mode, tap the Horizon Client Toolsradial menu icon, tap the gear icon, tap Touch, tap Touchpad sensitivity, and drag the slider.

If you are not using full-screen mode, Settings is in the menu in the upper-right corner of the Horizon Clienttoolbar. If you are not connected to a remote desktop or application, tap the gear icon in the upper rightcorner of the Horizon Client window.

GesturesVMware has created user interaction aids to help you navigate conventional Windows user interfaceelements on a non-Windows device.

ClickingAs in other applications, you tap to click a user interface element.

Right-ClickingThe following options are available for right-clicking:

n Use the Horizon Client Tools to display the regular virtual touchpad and use the touchpad's right-clickbutton.

n On a touch screen, tap with two fingers at nearly the same time. The right-click occurs where the firstfinger tapped.

n On some devices, you can use an external mouse, such as a USB or Bluetooth mouse, to right-click.

Scrolling and ScrollbarsThe following options are available for vertical scrolling.

n On a touch screen, tap with one or two fingers and then drag to scroll. The text under your fingersmoves in the same direction as your fingers.

Important Scrolling with one finger has the following limitations: It does not work if you havezoomed in, or when the onscreen keyboard is displayed, or when you are using the full-screentouchpad.

n Use the Horizon Client Tools to display the touchpad, tap the touchpad with two fingers, and then dragto scroll.

n Use the onscreen touchpad to move the mouse pointer and click scroll bars.

Zooming In and OutAs in other applications, pinch your fingers together or apart to zoom on a touch screen.

Window ResizingIf you use the full-screen touchpad to resize a window, touch and hold one finger at the corner or side of thewindow and drag to resize.

If you use the regular-size virtual touchpad, touch and hold the left-click button while dragging the corneror side of a window.

Sound, Music, and VideoIf sound is turned on for your device, you can play audio in a remote desktop.


54 VMware, Inc.

Using a Thin ClientHow you interact with Windows user interface elements when Horizon Client is installed on a thin clientdepends on the thin client model and the external input device you are using with the thin client. For moreinformation, see “Using Horizon Client on a Thin Client,” on page 20.

MultitaskingYou can switch between Horizon Client and other apps without losing a remote desktop or applicationconnection.

In a WiFi network, by default Horizon Client runs in the background indefinitely. In a 3G network,Horizon Client suspends data transmission when you switch to another app. Data transmission resumeswhen you switch back to Horizon Client.

The Horizon Client icon appears in the status bar when the app is running in the background and there is aconnection to a remote desktop. To switch back to Horizon Client, tap the icon in the status bar.

You can copy and paste plain text between an Android device application and a remote desktop or betweentwo remote desktops. Formatting information is not copied.

n Text that you copy to the Android device's clipboard is automatically copied to the remote desktop'sclipboard when you log in to the remote desktop.

n If you are logged in to a remote desktop, text that you copy to the remote desktop's clipboard is copiedto the Android device's clipboard when you press the Home button or switch to the background.

By default, you can copy and paste plain text between an Android device application and a remoteapplication. The clipboard can accommodate up to 64K characters for copy and paste operations.

To enable users to copy plain text between a remote application and an Android device application, youmust modify the PCoIP or VMware Blast group policy setting called Configure clipboard redirection on theRDS host that hosts the remote application pool.

For information about configuring PCoIP and VMware Blast group policy settings, see the ConfiguringRemote Desktop Features in Horizon 7 document.

Copying and Pasting Text and ImagesBy default, you can copy and paste plain text from an Android device to a remote desktop or application. Ifa Horizon administrator enables the feature, you can also copy and paste plain text from a remote desktopor application to the Android device, or between two remote desktops or applications.

A Horizon administrator can configure this feature so that copy and paste operations are allowed only fromthe Android device to a remote desktop or application, or only from a remote desktop or application to theAndroid device, or both, or neither.

You can also copy and paste images and Rich Text Format (RTF) text, but the following restrictions apply:

n You can copy and paste images and RTF text from the Android device to a remote desktop orapplication. You cannot copy and paste images and RTF text from a remote desktop or application tothe Android device.

n Only Google apps are supported. For example, you can copy and paste images and RTF text fromGoogle Docs, Gmail, Chrome, Google+, Google Hangouts, Google Calendar, Google Sheets, and GoogleSlides.

n You can copy and paste images only when the Android device can access the Google website.

n If you select an image and RTF text (or plain text) together, the image is discarded and only the text iscopied and pasted. To copy and paste an image, you must select only the image.


VMware, Inc. 55

n A Horizon administrator can use group policies to restrict clipboard formats during copy and pasteoperations. The clipboard format filter policies for Microsoft Office Chart and Smart Art data andMicrosoft Text Effects data are not supported. For information about clipboard format filter policies, seethe Configuring Remote Desktop Features in Horizon 7 document. Using Smart Policies to control copy andpaste behavior in remote desktops is not supported.

The clipboard can accommodate a maximum of 1 MB of data for copy and paste operations. If the text andRTF data together use less than maximum clipboard size, the formatted text is pasted. Often the RTF datacannot be truncated, so that if the text and formatting use more than the maximum clipboard size amount,the RTF data is discarded, and plain text is pasted. If you are unable to paste all of the formatted text youselected in one operation, you might need to copy and paste smaller amounts in each operation.

Saving Documents in a Remote ApplicationWith certain remote applications, such as Microsoft Word or WordPad, you can create and save documents.Where these documents are saved depends on your company's network environment. For example, yourdocuments might be saved to a home share mounted on your local computer.

A Horizon administrator can use the RDS Profiles group policy setting called Set Remote Desktop ServicesUser Home Directory to specify where documents are saved. For more information, see the ConfiguringRemote Desktop Features in Horizon 7 document.

Screen Resolutions and Using External DisplaysYou can use Horizon Client with external displays and you can change screen resolutions.

When you connect a client device to an external display or projector, Horizon Client supports certainmaximum display resolutions. You can change the screen resolution used on the client device to allowscrolling a larger screen resolution.

Enlarging the Screen Resolution for a Remote DesktopBy default, the display resolution is set so that the entire Windows desktop fits inside the client device, andthe desktop icons and task bar icons are a certain size. If you change the default to a higher resolution, thedesktop still fits inside the client device, but the desktop and taskbar icons become smaller.

You can pinch your fingers apart to zoom in and make the desktop larger than the device screen. You canthen tap and drag to access the edges of the desktop.

Changing the Display Resolution SettingYou can use the Resolution setting to set the display resolution to a larger value. If you are using a remotedesktop or application in full-screen mode, tap the Horizon Client Tools radial menu icon, tap the gear icon,tap Display, and tap Resolution. If you are not using full-screen mode, Settings is in the menu in the upper-right corner of the Horizon Client toolbar. If you are not connected to a remote desktop or application, tapthe gear icon in the upper right corner of the Horizon Client window.

Using High Quality ModeYou can use the High Quality Mode feature to obtain the best display quality in remote desktops andapplications.

To enable High Quality Mode, before you connect to a remote desktop or application, tap the gear icon inthe upper right corner of the Horizon Client window, tap Display, and then tap High Quality Mode. Youcannot enable the High Quality Mode setting after you connect to a remote desktop or application.


56 VMware, Inc.

The High Quality Mode feature has the following requirements and limitations:

n You cannot use the High Quality Mode feature for existing sessions. You must log out and log in to anew session for the feature to take effect.

n The High Quality Mode setting is not available if the Android device has less than an extra-highdensity (xhdpi) screen.

n The High Quality Mode feature requires Horizon Agent 7.0.3 or later.

High Quality Mode is disabled by default.

Using External DisplaysYou can use the Enable External display setting to configure settings for external displays, such asprojectors and attached monitors.

When the Enable External display setting is selected, you can select the Presentation mode, Multi-Monitormode, Keep screen on when external display is connected, and Zoom settings. When the Enable Externaldisplay setting is not selected, all of the external display settings are disabled.

In Presentation mode, a keyboard and expanded onscreen touchpad appear on the device when youdisplay a remote desktop on an external display. The expanded touchpad and keyboard appear when youplug the device into the external display. The device detects the maximum resolution provided by theexternal display. The presentation mode feature is supported only if you have an Android 4.2 or later device.

You can use the Multi-Monitor mode setting to extend a secondary desktop on an external display. TheUnity Touch sidebar is supported only on the device monitor. You cannot change the orientation and full-screen mode. You can interact with remote desktops and applications on the external display with theonscreen touchpad and full-screen touchpad. You cannot use the physical mouse on the external display.The multi-monitor mode feature is supported only if you have an Android 4.2 or later device.

You can use the Keep screen on when external display is connected setting to keep the display fromturning off after a period of inactivity. You can drag the Zoom slider to set the resolution for the externaldisplay.

If you are connected to a remote desktop or application, pressing the Android Back button quitspresentation mode or multi-monitor mode and the Enable External display setting is deselected.

To configure external display settings if you are using a remote desktop or application in full-screen mode,tap the Horizon Client Tools radial menu icon, tap the gear icon, tap Display, and then tap External DisplayOptions. If you are not using full-screen mode, Settings is in the menu in the upper-right corner of theHorizon Client toolbar. If you are not connected to a remote desktop or application, tap the gear icon in theupper right corner of the Horizon Client window.

Do not use an external mouse, such as a Bluetooth mouse, when using the Presentation mode setting.Instead, use the large onscreen touchpad on the Android device. If you attempt to use a mouse, the mousepointer might not be able to move to the bottom or right side of the screen, and when moved to the top ofthe screen, might conflict with some of the function keys shown on the large onscreen touchpad, rather thanthe top of the remote desktop.

PCoIP Client-Side Image CachePCoIP client-side image caching stores image content on the client to avoid retransmission. This featurereduces bandwidth usage.

The PCoIP image cache captures spatial, as well as temporal, redundancy. For example, when you scrolldown through a PDF document, new content appears from the bottom of the window and the oldest contentdisappears from the top of the window. All the other content remains constant and moves upward. ThePCoIP image cache is capable of detecting this spatial and temporal redundancy.


VMware, Inc. 57

Because during scrolling, the display information sent to the client device is primarily a sequence of cacheindices, using the image cache saves a significant amount of bandwidth. This efficient scrolling has benefitsboth on the LAN and over the WAN.

n On the LAN, where bandwidth is relatively unconstrained, using client-side image caching deliverssignificant bandwidth savings.

n Over the WAN, to stay within the available bandwidth constraints, scrolling performance would bedegraded without client-side caching. Over the WAN, client-side caching saves bandwidth and ensure asmooth, highly responsive scrolling experience.

With client-side caching, the client stores portions of the display that were previously transmitted. The cachesize is 250 MB.

Internationalization and International KeyboardsBoth the Horizon Client user interface and the documentation are available in English, Japanese, French,German, Simplified Chinese, Traditional Chinese, Korean, and Spanish. International keyboards of English-United States, Japanese, French, German, Simplified Chinese, Traditional Chinese, Korean, and Spanish aresupported.

To choose a language for the keyboard or voice, tap the Keyboard Settings key on the onscreen keyboard.The Keyboard Settings key is the left-most key on the bottom row of the onscreen keyboard.


58 VMware, Inc.

Troubleshooting Horizon Client 5You can solve most Horizon Client problems by resetting the desktop or reinstalling the app.

You can also enable log collection and send log files to VMware for troubleshooting.


n “Restart a Remote Desktop,” on page 59

n “Reset a Remote Desktop or Remote Applications,” on page 60

n “Uninstall Horizon Client,” on page 61

n “Collecting and Sending Logging Information to VMware,” on page 61

n “Report Horizon Client Crash Data to VMware,” on page 62

n “Horizon Client Stops Responding or the Remote Desktop Freezes,” on page 63

n “Problem Establishing a Connection When Using a Proxy,” on page 63

n “Connecting to a Server in Workspace ONE Mode,” on page 64

Restart a Remote DesktopYou might need to restart a remote desktop if the desktop operating system stops responding. Restarting aremote desktop is the equivalent of the Windows operating system restart command. The desktop operatingsystem usually prompts you to save any unsaved data before it restarts.

You can restart a remote desktop only if a Horizon administrator has enabled the desktop restart feature forthe desktop.

For information about enabling the desktop restart feature, see the Setting Up Virtual Desktops in Horizon 7 orSetting Up Published Desktops and Applications in Horizon 7 document.

Prerequisites


n If you have not logged in at least once, become familiar with the procedure “Connect to a RemoteDesktop or Application,” on page 34.

Procedure



VMware, Inc. 59

3 Touch and hold the desktop name until the context menu appears.


4 Tap Restart in the context menu.

Restart is available only if the status of the desktop is such that the action can be taken.

The operating system in the remote desktop reboots and Horizon Client disconnects and logs off from thedesktop.

What to do next

Wait an appropriate amount of time for system startup before you attempt to reconnect to the remotedesktop.

If restarting the remote desktop does not solve the problem, you might need to reset the remote desktop. See “Reset a Remote Desktop or Remote Applications,” on page 60.

Reset a Remote Desktop or Remote ApplicationsYou might need to reset a remote desktop if the desktop operating system stops responding and restartingthe remote desktop does not solve the problem. Resetting remote applications quits all open applications.

Resetting a remote desktop is the equivalent of pressing the Reset button on a physical PC to force the PC torestart. Any files that are open on the remote desktop are closed and are not saved.

Resetting remote applications is the equivalent of quitting the applications without saving any unsaveddata. All open remote applications are closed, even applications that come from different RDS server farms.

You can reset a remote desktop only if a Horizon administrator has enabled the desktop reset feature for thedesktop.

For information about enabling the desktop reset feature, see the Setting Up Virtual Desktops in Horizon 7 orSetting Up Published Desktops and Applications in Horizon 7 document.

Prerequisites


n If you have not logged in at least once, become familiar with the procedure “Connect to a RemoteDesktop or Application,” on page 34.

Procedure



3 Touch and hold the desktop or application name until the context menu appears.


4 Tap Reset in the context menu.

Reset is available only if the status of the desktop or application is such that the action can be taken.

When you reset a remote desktop, the operating system in the remote desktop reboots and Horizon Clientdisconnects and logs off from the desktop. When you reset remote applications, the applications quit.

What to do next

Wait an appropriate amount of time for system startup before attempting to reconnect to the remote desktopor application.


60 VMware, Inc.

Uninstall Horizon ClientYou can sometimes resolve problems with Horizon Client by uninstalling and reinstalling Horizon Client.

You uninstall Horizon Client just as you would any Android app.

Procedure

1 On your device, go to the Horizon app.

2 Touch and hold the app icon until the Uninstall (trash can) icon appears on your device.

3 Drag the app to the Uninstall (trash can) icon.

Alternatively, you can go to Apps > Settings and select Applications > Manage Applications touninstall Horizon Client.

What to do next

Reinstall Horizon Client.

See “Install or Upgrade Horizon Client,” on page 13.

Collecting and Sending Logging Information to VMwareYou can configure Horizon Client to collect log information and send log files to VMware fortroubleshooting.

If Horizon Client quits unexpectedly, Horizon Client immediately prompts you to send log files to VMware.If log collection is enabled, the crash log file contains detailed debug information. If log collection isdisabled, only certain exception information is included in the crash log file.

Horizon Client generates three types of log files (Horizon_View_Client_logs_timestamp.txt,libcdk_timestamp.txt, and pcoip_client_timestamp.txt) and keeps the last five log files of each type.

If you choose to send log files to VMware, Horizon Client uses the available email client on the client deviceto create a message. If the email client can send multiple attachments, Horizon Client attaches the last fivelog files of each type to the message. If the email client cannot send multiple attachments, Horizon Clientcompresses the last five log files of each type and attaches a ZIP file to the message. The ZIP file namecontains a time stamp, for example, Horizon_View_Client_logs_timestamp.zip.

You can also manually retrieve and send log files at any time.

Enable Horizon Client Log CollectionWhen you enable log collection, Horizon Client creates log files that contain information that can helpVMware troubleshoot problems with Horizon Client.

Because log collection affects the performance of Horizon Client, enable log collection only if you areexperiencing a problem.

Prerequisites

Verify that an email client is available on the device. Horizon Client requires an email client to send log files.

Procedure

1 Open Settings and tap Log collection.

If you are connected to a remote desktop or application in full-screen mode, tap the Horizon ClientTools radial menu icon and tap the gear icon. If you are not using full-screen mode, Settings is in themenu in the upper right corner of the Horizon Client toolbar. If you are not connected to a remotedesktop or application, tap the gear icon in the upper right corner of the Horizon Client window.

Chapter 5 Troubleshooting Horizon Client

VMware, Inc. 61

2 Tap Enable log to select the check box and tap OK to confirm your choice.

After log collection is enabled, Horizon Client generates a log file it quits unexpectedly or when it is exitedand relaunched.

Manually Retrieve and Send Horizon Client Log FilesWhen Horizon Client log collection is enabled on your device, you can manually retrieve and send log filesat any time.

This procedure shows you how retrieve and send log files through Horizon Client. You can also retrieve logfiles by using tools that can access app storage space. Horizon Client saves log files in theAndroid/data/com.vmware.view.client.android/files directory.

Prerequisites

n Verify that an email client is available on the device. Horizon Client requires an email client to send logfiles.

n Enable Horizon Client log collection. See “Enable Horizon Client Log Collection,” on page 61.

Procedure



2 Tap Send the log.

Horizon Client uses the email client on the device to create a message. The body of the messagecontains information about your device. If your email client can send multiple attachments,Horizon Client attaches the last five log files of each type to the message. If your email client cannotsend multiple attachments, Horizon Client compresses the last five log files of each type and attaches aZIP file to the message.

Disable Horizon Client Log CollectionBecause log collection affects the performance of Horizon Client, disable log collection if you are nottroubleshooting a problem.

Procedure



2 Tap Enable log to clear the check box.

Report Horizon Client Crash Data to VMwareYou can configure Horizon Client to report crash data to VMware.

Procedure

1 Tap the Settings (gear) icon in the upper right corner of the Horizon Client window.


62 VMware, Inc.

2 Tap Crash Reporting.

3 Tap Crash Reporting to enable or disable the check box.

The setting is enabled by default.

If Horizon Client stops responding, a crash log file is uploaded to the VMware server the next timeHorizon Client starts.

Horizon Client Stops Responding or the Remote Desktop FreezesWhen the window freezes, first, try resetting the remote desktop operating system.

Problem

Horizon Client does not work or repeatedly exits unexpectedly or the remote desktop freezes.

Cause

Assuming that Horizon servers are configured properly and that firewalls surrounding them have thecorrect ports open, other issues usually relate to Horizon Client on the device or to the guest operatingsystem on the remote desktop.

Solution

n If the operating system in the remote desktop freezes, use Horizon Client on the device to reset thedesktop.

This option is available only if the Horizon administrator has enabled this feature.

n Uninstall and reinstall the app on the device.

n If resetting the remote desktop and reinstalling Horizon Client do not help, you can reset the Androiddevice, as described in the user guide for your Android device.

n If you get a connection error when you attempt to connect to the server, you might need to change yourproxy settings.

Problem Establishing a Connection When Using a ProxySometimes if you attempt to connect to Connection Server using a proxy while on the LAN, an error occurs.

Problem

If the Horizon environment is set up to use a secure connection from the remote desktop to ConnectionServer, and if the client device is configured to use an HTTP proxy, you might not be able to connect.

Cause

Unlike Windows Internet Explorer, the client device does not have an Internet option to bypass the proxyfor local addresses. When an HTTP proxy is used for browsing external addresses, and you try to connect toConnection Server using an internal address, you might see the error message Could not establishconnection.

Solution

u Remove the proxy settings so that the device no longer uses a proxy.

Chapter 5 Troubleshooting Horizon Client

VMware, Inc. 63

Connecting to a Server in Workspace ONE ModeIf you cannot connect to a server directly through Horizon Client, or if your desktop and applicationentitlements are not visible in Horizon Client, Workspace ONE mode might be enabled on the server.

Problem

n When you try to connect to the server directly through Horizon Client, Horizon Client redirects you tothe Workspace ONE portal.

n When you open a desktop or application through a URI or shortcut, or when you open a local filethrough file association, the request redirects you to the Workspace ONE portal for authentication.

n After you open a desktop or application through Workspace ONE and Horizon Client starts, you cannotsee or open other entitled remote desktops or applications in Horizon Client.

Cause

Beginning with Horizon 7 version 7.2, a Horizon administrator can enable Workspace ONE mode on aConnection Server instance. This behavior is normal when Workspace ONE mode is enabled on aConnection Server instance.

Solution

Use Workspace ONE to connect to a Workspace ONE enabled server and access your remote desktops andapplications.


64 VMware, Inc.

Index

Aagent, installation requirements 12AirWatch integration 14, 16Android, installing Horizon Client on 7Android Horizon Client, uninstalling 61Apteligent 62

Bbackground multitasking 55

Ccaching, client-side image 57certificates, ignoring problems 33Chromebook 19Chromebooks 8client image cache 57Connection Server 12connection problems 63copying and pasting 55customer experience program, desktop pool

data 24

Ddefault view 23DeX Mode 41disconnecting from a remote desktop 40display requirements 56displays, external 56

Eexternal displays 56

Ffavorites 39favorites list in Unity Touch sidebar 48feature support matrix 44fingerprint authentication 11

GGoogle Play Store 13, 61

Hhardware requirements

Android devices 7smart card authentication 9

Horizon Clientdisconnect from a desktop 40logging in 34setup for Android devices 7system requirements for Android devices 7troubleshooting 63

Horizon Client for Androidinstalling 13uninstalling 61

Iimage cache, client 57input devices for the Android 46installing Horizon Client 13

JJapanese keyboard layout 46

Kkeyboard

navigation keys 52onscreen 52, 54

keyboard support 46, 58keys, navigation 52

Llocal storage redirection 37log collection 62log off 40logging 61logging in

to a desktop 34to a server 34

Mmanage desktop shortcuts 41managing desktops 33multitasking 55

Nnavigation keys 52

VMware, Inc. 65

Ooperating systems, supported on the agent 12options, configuration 52

PPCoIP client image cache 57picture in picture mode 41prerequisites for client devices 12projectors 56proxy connections 63

RReal-Time Audio-Video feature 9reset a desktop 60resizing windows 54resolution, screen 56restart desktop 59RSA SecurID tokens 21RTAV 47running in the background 55

SSamsung DeX Mode 41saving documents in a remote application 56screen resolution 56scrolling 54security servers 12server connections, managing 33shortcut

desktops 41Home screen 38

sidebar, Unity Touch 48smart card authentication

on devices 10requirements 9

software tokens 21split screen mode 41SSL options 22system requirements, for Android devices 7

Ttablet gestures 54thin client 20thin client requirements 8Thin Client mode 20tokens, RSA SecurID 21toolbar, Horizon Client 52touchpad, virtual 52troubleshooting, connection problems 63

UUnauthenticated Access 36Unity Touch feature 48

Unity Touch sidebar 50URI examples 30URI syntax for Horizon Clients 27URIs (uniform resource identifiers) 27

VVMware Blast 22

WWindows 8 gestures 47Workspace ONE 64


66 VMware, Inc.